CVE-2010-4690: The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with...

Security readout for executives and security teams

CVE-2010-4690 is an information disclosure issue in Cisco ASA 5500 series appliances. When the Mobile User Security service is present on ASA software before 8.3(2), HTTP requests that should be authenticated as coming from a Web Security Appliance may not be checked correctly, potentially exposing sensitive information. Exposure is most likely where legacy Cisco ASA 5500 appliances still run ASA software before 8.3(2) and use or expose the Mobile User Security service for WSA-related traffic. Treat this as a legacy perimeter-device cleanup item unless current exposure is found. It is not KEV-listed in the provided bundle, but affected ASA appliances sit at sensitive network boundaries, so confirmed vulnerable systems should be prioritized for upgrade or retirement. Mitigation focus: Upgrade affected Cisco ASA software to 8.3(2) or a later supported fixed release.; Review Cisco ASA release notes and vendor guidance for MUS and WSA configuration requirements.; Inventory ASA 5500 devices and identify versions older than 8.3(2)..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.