Vendor / Project: Cisco Product: Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Description: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device. Required Action: Apply updates per vendor instructions. Due Date: 2022-05-03 Ransomware Campaign Use: Unknown CWEs: CWE-20 Notes: https://nvd.nist.gov/vuln/detail/CVE-2020-3452