cisco-sa-20170315-wsa
Cisco Web Security Appliance URL Filtering Bypass Vulnerability
Medium · Updated · Cisco
1 product with CSAF evidence
A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured URL filter rule. The vulnerability is due to incomplete validation of the HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request through the targeted device. An exploit could allow the attacker to bypass a configured URL filter. There are no workarounds that address this vulnerability.
| Product | CVE |
|---|---|
| Cisco Web Security Appliance (WSA) | CVE-2017-3870 |