CVE-2014-3392 Information

Description

The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51) 8.3 before 8.3(2.42) 8.4 before 8.4(7.23) 8.6 before 8.6(1.15) 9.0 before 9.0(4.24) 9.1 before 9.1(5.12) 9.2 before 9.2(2.8) and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process memory or modify memory contents via crafted parameters aka Bug ID CSCuq29136.

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa