CVE-2023-20264

N/A

A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to intercept the SAML assertion of a user who is authenticating to a remote access VPN session. This vulnerability is due to insufficient validation of the login URL. An attacker could exploit this vulnerability by persuading a user to access a site that is under the control of the attacker, allowing the attacker to modify the login URL. A successful exploit could allow the attacker to intercept a successful SAML assertion and use that assertion to establish a remote access VPN session toward the affected device with the identity and permissions of the hijacked user, resulting in access to the protected network.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

指向未可信站点的URL重定向(开放重定向)

Cisco Firepower Threat Defense 安全漏洞

Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。 Cisco Adaptive Security Appliance 和 Cisco Firepower Threat Defense存在安全漏洞，该漏洞源于用于远程访问 VPN 的安全断言标记语言 (SAML) 2.0 单点登录 (SSO) 实施存在漏洞。该漏洞可能允许未经身份验证的远程攻击者拦截正在对远程访问 VPN 会话进行身份验证的用户的 SAML 断言。

N/A

N/A