{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:32:04Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20180418-asaanyconnect","slug":"cisco-sa-20180418-asaanyconnect","vendor":"Cisco","title":"Cisco ASA Software, FTD Software, and AnyConnect Secure Mobility Client SAML Authentication Session Fixation Vulnerability","summary":"A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. The authentication would need to be done by an unsuspecting third party. The vulnerability exists because there is no mechanism for the ASA or FTD Software to detect that the authentication request originates from the AnyConnect client directly. An attacker could exploit this vulnerability by persuading a user to click a crafted link and authenticating using the company's Identity Provider (IdP). A successful exploit could allow the attacker to hijack a valid authentication token and use that to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect","severity":"High","published_at":"2018-04-18T16:00:00Z","updated_at":"2018-10-05T16:12:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect/csaf/cisco-sa-20180418-asaanyconnect.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":4,"public_evidence_count":4,"kev_count":0,"highest_epss":0.03577},"cves":[{"id":"CVE-2018-0229","kev":false,"epss":{"score":0.03577,"percentile":0.88117,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"}}],"public_evidence":[{"product":{"name":"Cisco Secure Client","slug":"cisco-secure-client","vendor":"Cisco"},"cve":{"id":"CVE-2018-0229"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:36:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Client","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03577,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-04-18T16:00:00Z","updated_at":"2018-10-05T16:12:00Z","advisory_updated_at":"2018-10-05T16:12:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect"},"row_display_order":1},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2018-0229"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:36:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"6.2.1; 6.2.2; 6.2.3; 9.7.1; 9.7.1.1; 9.7.1.15; 9.7.1.16; 9.7.1.19; 9.7.1.2; 9.7.1.20; 9.7.1.21; 9.7.1.4; 9.7.1.8; 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.10; 9.8.2.11; 9.8.2.14; 9.8.2.15; 9.8.2.17; 9.8.2.18; 9.8.2.19; 9.8.2.20; 9.9.1; 9.9.1.2; 9.9.1.3; 9.9.1.4; 9.9.2","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03577,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-04-18T16:00:00Z","updated_at":"2018-10-05T16:12:00Z","advisory_updated_at":"2018-10-05T16:12:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect"},"row_display_order":2},{"product":{"name":"Cisco Firepower Management Center","slug":"cisco-firepower-management-center","vendor":"Cisco"},"cve":{"id":"CVE-2018-0229"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:36:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"6.2.2.1; 6.2.2.2; 6.2.2.3; 6.2.2.4; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03577,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-04-18T16:00:00Z","updated_at":"2018-10-05T16:12:00Z","advisory_updated_at":"2018-10-05T16:12:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect"},"row_display_order":3},{"product":{"name":"Cisco Catalyst 6500 Network Analysis Module (NAM)","slug":"cisco-catalyst-6500-network-analysis-module-nam","vendor":"Cisco"},"cve":{"id":"CVE-2018-0229"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:36:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.1 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.2 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.2.1 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.2.2 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.2.3 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.2.4 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.3 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.3.1 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.3.2 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.3.3 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 6.2.3.4 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.1 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.15 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.16 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.19 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.2 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.20 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.21 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.4 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.7.1.8 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.1 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.1.5 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.1.7 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.10 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.11 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.14 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.15 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.17 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.18 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.19 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.8.2.20 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.9.1 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.9.1.2 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.9.1.3 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.9.1.4 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM); Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Release 9.9.2 when installed on Cisco Catalyst 6500 Network Analysis Module (NAM)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03577,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-04-18T16:00:00Z","updated_at":"2018-10-05T16:12:00Z","advisory_updated_at":"2018-10-05T16:12:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect","row_display_order":4}]}