{"metadata": {"vulnerability": "CVE-2024-20297", "count": 24, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 17}}, "data": [{"timestamp": "2023-11-08T15:08:07.629Z", "date_only": false, "value": "2023-11-08T15:08:07.629Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-20297", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:21:43.024Z", "date_only": false, "value": "2023-12-13T01:21:43.024311Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-20297", "record": "GSD-2024-20297", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-10-23T15:57:25Z", "date_only": false, "value": "2024-10-23T15:57:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-23T16:00:00Z", "date_only": false, "value": "2024-10-23T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-23T17:07:52.657Z", "date_only": false, "value": "2024-10-23T17:07:52.657Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-20297", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-23T17:07:52.657Z", "date_only": false, "value": "2024-10-23T17:07:52.657Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2024-20297", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-23T17:15:15Z", "date_only": false, "value": "2024-10-23T17:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V4MC-99PX-FQ68", "record": "GHSA-V4MC-99PX-FQ68", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-23T17:15:15.437Z", "date_only": false, "value": "2024-10-23T17:15:15.437", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20297", "record": "FKIE_CVE-2024-20297", "field": "published"}, {"timestamp": "2024-10-23T18:33:08Z", "date_only": false, "value": "2024-10-23T18:33:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V4MC-99PX-FQ68", "record": "GHSA-V4MC-99PX-FQ68", "field": "published"}, {"timestamp": "2024-10-23T18:33:08Z", "date_only": false, "value": "2024-10-23T18:33:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V4MC-99PX-FQ68", "record": "GHSA-V4MC-99PX-FQ68", "field": "modified"}, {"timestamp": "2024-10-23T18:42:50.764Z", "date_only": false, "value": "2024-10-23T18:42:50.764224Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20297", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-23T18:42:50.764Z", "date_only": false, "value": "2024-10-23T18:42:50.764224Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20297", "record": "FKIE_CVE-2024-20297", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-23T19:54:41Z", "date_only": false, "value": "2024-10-23T19:54:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8738", "record": "CVE-2024-20297", "field": "creation_timestamp", "uuid": "abe82e19-a471-4567-b96e-17a5a141f321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-20297 - Cisco AnyConnect Firewall Group ACL Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-20297 \nPublished : Oct. 23, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have been denied to flow through an affected device. This vulnerability is due to a logic error in populating group ACLs when an AnyConnect client establishes a new session toward an affected device. An attacker could exploit this vulnerability by establishing an AnyConnect connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8738"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-24T09:41:17.841Z", "date_only": false, "value": "2024-10-24T09:41:17.841+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-24T17:14:45.950Z", "date_only": false, "value": "2024-10-24T17:14:45.950Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-20297", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-24T17:14:45.950Z", "date_only": false, "value": "2024-10-24T17:14:45.950Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20297", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T21:19:17Z", "date_only": false, "value": "2024-10-24T21:19:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-10-24T21:19:17Z", "date_only": false, "value": "2024-10-24T21:19:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-13T15:45:08Z", "date_only": false, "value": "2025-10-13T15:45:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-11T19:33:44.513Z", "date_only": false, "value": "2026-08-11T19:33:44.513", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20297", "record": "FKIE_CVE-2024-20297", "field": "lastModified"}]}