Uber · Report #1257100
CVE-2020-3452 - unauthenticated file read on anyconnect.routematch.com
Validstatus
mediumseverity
39upvotes
5 Aug 2021disclosed
Summary
The CISCO ASA instance at anyconnect.routematch.com was vulnerable to CVE-2020-3452, allowing an unauthenticated attacker to retrieve arbitrary files on the local filesystem.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.