CVE-2016-9212 Security feature bypass in Cisco Web Security Appliance
An unauthenticated remote attacker can bypass SSL/TLS blocking policies on Cisco Web Security Appliances when HTTPS decryption is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-9212?
CVE-2016-9212 is a high-severity vulnerability in Cisco Web Security Appliance, published on 14 Dec 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to connect to a secure website over Secure Sockets Layer (SSL) or Transport Layer Security (TLS), even if the WSA is configured to block connections to the website. Affected Products: This vulnerability affects Cisco Web Security Appliances if the HTTPS decryption options are enabled and configured for the device to block connections to certain websites. More Information: CSCvb49012. Known Affected Releases: 9.0.1-162 9.1.1-074.
Weakness: CWE-20
Which versions are affected by CVE-2016-9212?
It affects 1 product.
Products include Cisco Web Security Appliance.
How do I fix CVE-2016-9212?
No fix has been published for CVE-2016-9212 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-9212 being exploited?
There is no known exploitation of CVE-2016-9212 in the wild and no public exploit code.
Other vulnerabilities in Cisco Web Security Appliance
Sources
Also known as GHSA-334p-wmh8-9fqw.