Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco IOS软件HTTP(S)认证代理功能绕过认证漏洞
Vulnerability Description
Cisco IOS是美国思科（Cisco）公司为其网络设备开发的操作系统。 配置了HTTP(S)认证代理、Web认证或确认功能的Cisco IOS软件中存在漏洞，可能允许认证代理未经认证或同意确认网页便许可访问。必须存在至少一个成功认证的会话或接受的确认会话才会暴露这个漏洞。在这种情况下无论用户所提供的认证信息如何，无论AAA服务器是否定义，无论口令是否正确，RADIUS或TACACS+服务器都会将之后的用户显示为已通过认证，如果执行认证的话所用用户的用户名与初始连接的用户名相同。 这个漏洞的起因是代码中
CVSS Information
N/A
Vulnerability Type
N/A