CVE-2016-1296 Information

Description

The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055 9.1.0-000 and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method aka Bug ID CSCux00848.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160119-wsa http://www.securitytracker.com/id/1034763

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

NONE

Base Severity

7.5