CVE-2017-6752

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the interaction between Lightweight Directory Access Protocol (LDAP) and SSL Connection Profile when they are configured together. An attacker could exploit the vulnerability by performing a username enumeration attack to the IP address of the device. An exploit could allow the attacker to determine valid usernames. Cisco Bug IDs: CSCvd47888.

• CWE-200
• CWE-200

• http://www.securityfocus.com/bid/100113Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039057Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd47888Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa2Vendor Advisory
• http://www.securityfocus.com/bid/100113Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039057Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd47888Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-asa2Vendor Advisory

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6746A vulnerability in the web interface of the Cisco Web Securi…
• CVE-2017-6747A vulnerability in the authentication module of Cisco Identi…
• CVE-2017-6748A vulnerability in the CLI parser of the Cisco Web Security …
• CVE-2017-6749A vulnerability in the web-based management interface of Cis…
• CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Applia…
• CVE-2017-6751A vulnerability in the web proxy functionality of the Cisco …7.5
• CVE-2017-6753A vulnerability in Cisco WebEx browser extensions for Google…
• CVE-2017-6754A vulnerability in the web-based management interface of the…
• CVE-2017-6755A vulnerability in the web portal of the Cisco Prime Collabo…
• CVE-2017-6756A vulnerability in the Web UI Application of the Cisco Prime…
• CVE-2017-6757A vulnerability in Cisco Unified Communications Manager 10.5…
• CVE-2017-6758A vulnerability in the web framework of Cisco Unified Commun…