CVE-2016-1296
HighSummary
The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method.
Risk Assessment
Attackers may exploit this vulnerability to bypass security measures, potentially leading to unauthorized access to network resources.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and implement additional security measures to monitor HTTP traffic.
Other vulnerabilities in Cisco Web Security Appliance (WSA)
See all- CVE-2017-6750High
A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated local attacker to log in to the device with the privileges of a limited user or an unauthenticated remote attacker to authenticate to certain areas of the web GUI.
- CVE-2015-0693High
Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, allowing local users to execute arbitrary Python code and gain privileges via a crafted pickle file.
Original NVD description (English source)
The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848.