Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-6751

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypass Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88863. Known Affected Releases: 10.1.0-204 9.0.0-485.

Published

2017-07-25T19:29:00.363

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco web_security_appliance 9.0.0-162 Yes
Application cisco web_security_appliance 9.0.0-193 Yes
Application cisco web_security_appliance 9.0.0-485 Yes
Application cisco web_security_appliance 10.0.0-232 Yes
Application cisco web_security_appliance 10.0.0-233 Yes
Application cisco web_security_appliance 10.1.0-204 Yes
Application cisco web_security_virtual_appliance 9.0.0 Yes
Application cisco web_security_virtual_appliance 10.0.0 Yes
Application cisco web_security_virtual_appliance 10.1.0 Yes
Application cisco web_security_virtual_appliance 10.1.1 Yes
References