UpHeron
All vulnerabilities

Servers and applications

CVE-2020-3578

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access rule and access parts of the WebVPN portal that are supposed to be blocked. The vulnerability is due to insufficient validation of URLs when portal access rules are…

Severity
Medium 6.5
Published
21 Oct 2020
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.8.4.26, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.19
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.14 before 9.14.1.19
  • From 9.13 before 9.13.1.13
  • From 9.12 before 9.12.4.4
  • From 9.10 before 9.10.1.44
All 7 release lines
  • Every version before 9.6.4.45
  • From 9.7 before 9.8.4.26
  • From 9.9 before 9.9.2.80
  • From 9.10 before 9.10.1.44
  • From 9.12 before 9.12.4.4
  • From 9.13 before 9.13.1.13
  • From 9.14 before 9.14.1.19
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:firepower_threat_defense
  • Every version before 6.3.0.6
  • From 6.5.0 before 6.5.0.5
  • From 6.6.0 before 6.6.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-3578
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-3578