CVE-2010-4690: Cisco 5500 Series Adaptive Security Appliance

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.

Affected products

• Cisco 5500 Series Adaptive Security Appliance
• Cisco Adaptive Security Appliance Software: up to and including 8.3\(1\); version 7.0 only; version 7.0(0) only; version 7.0(2) only; version 7.0(4) only; version 7.0(5) only; …
• Cisco ASA 5500

Published 2011-01-07. Last modified 2026-06-16.