Cisco Secure Web Appliance
Monthly
Authentication policy bypass in Cisco Secure Web Appliance (AsyncOS) allows unauthenticated, remote attackers to send restricted HTTP requests through the appliance by exploiting improper validation of authentication input. The vulnerability (CWE-305) carries a CVSS 3.1 score of 5.3 and low EPSS likelihood (0.07%), with no active exploitation reported. Successful exploitation bypasses policy enforcement but does not directly compromise the appliance, resulting only in low integrity impact.
Authentication policy bypass in Cisco Secure Web Appliance (AsyncOS) allows unauthenticated, remote attackers to send restricted HTTP requests through the appliance by exploiting improper validation of authentication input. The vulnerability (CWE-305) carries a CVSS 3.1 score of 5.3 and low EPSS likelihood (0.07%), with no active exploitation reported. Successful exploitation bypasses policy enforcement but does not directly compromise the appliance, resulting only in low integrity impact.