SecuritySpace - CVE-2016-9212

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-9212

Description: A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to connect to a secure website over Secure Sockets Layer (SSL) or Transport Layer Security (TLS), even if the WSA is configured to block connections to the website. Affected Products: This vulnerability affects Cisco Web Security Appliances if the HTTPS decryption options are enabled and configured for the device to block connections to certain websites. More Information: CSCvb49012. Known Affected Releases: 9.0.1-162 9.1.1-074.

Test IDs: 1.3.6.1.4.1.25623.1.0.106456

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9212
BugTraq ID: 94774
http://www.securityfocus.com/bid/94774
http://www.securitytracker.com/id/1037410

CVE ID:	CVE-2016-9212
Description:	A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to connect to a secure website over Secure Sockets Layer (SSL) or Transport Layer Security (TLS), even if the WSA is configured to block connections to the website. Affected Products: This vulnerability affects Cisco Web Security Appliances if the HTTPS decryption options are enabled and configured for the device to block connections to certain websites. More Information: CSCvb49012. Known Affected Releases: 9.0.1-162 9.1.1-074.
Test IDs:	1.3.6.1.4.1.25623.1.0.106456
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9212 BugTraq ID: 94774 http://www.securityfocus.com/bid/94774 http://www.securitytracker.com/id/1037410