CVE-2019-1884

CWE-20 — Improper Input Validation4 documents4 sources
Severity
6.5MEDIUM
EPSS
0.4%
top 42.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Cisco WEB Security Appliance (wsa)Cisco AsyncosCisco WEB Security Appliance
Timeline
PublishedJul 4
Latest updateMay 24

Description

A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation mechanisms for certain fields in HTTP/HTTPS requests sent through an affected device. A successful attacker could exploit this vulnerability by sending a malicious HTTP/HTTPS request through an affected device. An ex…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 3.1 | Impact: 4.0

Affected Packages3 packages

▶CVEListV5cisco/cisco_web_security_appliance_(wsa)unspecified — 10.5.5-005
▶NVDcisco/asyncos10.1 — 10.5.5-005+2

🔴Vulnerability Details

2
GHSA
GHSA-jpm3-6rm2-fhgg: A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote a↗2022-05-24
▶
CVEList
Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability↗2019-07-04
▶

📋Vendor Advisories

1
Cisco
Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability↗2019-07-03
▶
CVE-2019-1884 (MEDIUM CVSS 6.5) | A vulnerability in the web proxy fu | cvebase.io