SynopsisThe remote device is missing a vendor-supplied security patch.
DescriptionAccording to its self-reported version the Cisco Adaptive Security Appliance (ASA) software running on the remote device is affected by a privilege escalation vulnerability in web management interface due to improper validation of user privileges. An authenticated, remote attacker can exploit, by sending specific HTTP requests via HTTPS, to gain elevated privileges. Please see the included Cisco BIDs and Cisco Security Advisories for more information.
SolutionUpgrade to the relevant fixed version referenced in Cisco security advisory cisco-sa-20181219-asa-privesc.