Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability
Vulnerability Description
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured to perform Kerberos authentication for VPN or local device access. The vulnerability is due to insufficient identity verification of the KDC when a successful authentication response is received. An attacker could exploit this vulnerability by spoofing the KDC server response to the ASA device. This malicious response would not have been authenticated by the KDC. A successful attack could allow an attacker to bypass Kerberos authentication.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
Cisco Adaptive Security Appliances Software 授权问题漏洞
Vulnerability Description
Cisco Adaptive Security Appliances Software（ASA Software）是美国思科（Cisco）公司的一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。 Cisco ASA Software中存在授权问题漏洞，该漏洞源于在接收到身份验证成功的响应时，程序没有对KDC进行充分的身份验证。攻击者可利用该漏洞绕过Kerberos身份验证。以下产品及版本受到影响：Cisco ASA Software 9.6及之前版本，9.7版本，9.8版本，9
CVSS Information
N/A
Vulnerability Type
N/A