CVE-2010-4690

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-07 · updated 2026-06-16
Weakness: CWE-287

Description

The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: through 8.3\(1\); 7.0, 7.0(0), 7.0(2), 7.0(4), 7.0(5), 7.0(5.2) (+53)
Cisco Asa 5500: all versions

References

http://secunia.com/advisories/42931
http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf
http://www.securityfocus.com/bid/45768
http://www.securitytracker.com/id?1024963
https://exchange.xforce.ibmcloud.com/vulnerabilities/64574
http://secunia.com/advisories/42931
http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf
http://www.securityfocus.com/bid/45768
http://www.securitytracker.com/id?1024963
https://exchange.xforce.ibmcloud.com/vulnerabilities/64574

Get alerted when CVE-2010-4690 or the next vulnerability affects your stack