CVE-2010-1575: Cisco Content Services Switch 11500

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete client-supplied ClientCert-* headers, which might allow remote attackers to bypass authentication via crafted header data, as demonstrated by a ClientCert-Subject-CN header, aka Bug ID CSCsz04690.

Affected products

• Cisco Content Services Switch 11500: version 08.20.1.01 only

Published 2010-07-06. Last modified 2026-06-16.