Примечания к выпуску для Cisco Cisco ASA 5585-X Adaptive Security Appliance

This document contains release information for the Cisco ASA 5500-X software Version 8.6(1). 

This document includes the following sections: 

Cisco ASA Clientless SSL VPN Portal Customization Integrity Vulnerability—Multiple 
vulnerabilities have been fixed for clientless SSL VPN in ASA software, so you should upgrade your 
software to a fixed version. See 

details about the vulnerability and a list of fixed ASA versions. Also, if you ever ran an earlier ASA 
version that had a vulnerable configuration, then regardless of the version you are currently running, 
you should verify that the portal customization was not compromised. If an attacker compromised 
a customization object in the past, then the compromised object stays persistent after you upgrade 
the ASA to a fixed version. Upgrading the ASA prevents this vulnerability from being exploited 
further, but it will not modify any customization objects that were already compromised and are still 
present on the system.