CVE-2010-4690
cisco: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.
The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:5500_series_adaptive_security_appliance
- cisco:adaptive_security_appliance_software
- cisco:asa_5500