{"metadata": {"vulnerability": "cve-2024-20299", "count": 24, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 17}}, "data": [{"timestamp": "2023-11-08T15:08:07.630Z", "date_only": false, "value": "2023-11-08T15:08:07.630Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-20299", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:21:43.058Z", "date_only": false, "value": "2023-12-13T01:21:43.058282Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-20299", "record": "GSD-2024-20299", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-10-23T15:57:25Z", "date_only": false, "value": "2024-10-23T15:57:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-23T16:00:00Z", "date_only": false, "value": "2024-10-23T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-23T17:08:13.630Z", "date_only": false, "value": "2024-10-23T17:08:13.630Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-20299", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-23T17:08:13.630Z", "date_only": false, "value": "2024-10-23T17:08:13.630Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "cve-2024-20299", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-23T17:15:16Z", "date_only": false, "value": "2024-10-23T17:15:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F7QM-MCG6-FHVG", "record": "GHSA-F7QM-MCG6-FHVG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-23T17:15:16.900Z", "date_only": false, "value": "2024-10-23T17:15:16.900", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20299", "record": "FKIE_CVE-2024-20299", "field": "published"}, {"timestamp": "2024-10-23T18:33:08Z", "date_only": false, "value": "2024-10-23T18:33:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F7QM-MCG6-FHVG", "record": "GHSA-F7QM-MCG6-FHVG", "field": "published"}, {"timestamp": "2024-10-23T18:33:08Z", "date_only": false, "value": "2024-10-23T18:33:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F7QM-MCG6-FHVG", "record": "GHSA-F7QM-MCG6-FHVG", "field": "modified"}, {"timestamp": "2024-10-23T18:42:49.526Z", "date_only": false, "value": "2024-10-23T18:42:49.526238Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-20299", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-23T18:42:49.526Z", "date_only": false, "value": "2024-10-23T18:42:49.526238Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20299", "record": "FKIE_CVE-2024-20299", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-23T19:54:36Z", "date_only": false, "value": "2024-10-23T19:54:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8735", "record": "CVE-2024-20299", "field": "creation_timestamp", "uuid": "066fe629-f064-4562-bb69-b4108f05fca6", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-20299 - Cisco ASA/FTD AnyConnect Remote ACL Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-20299 \nPublished : Oct. 23, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have been denied to flow through an affected device. This vulnerability is due to a logic error in populating group ACLs when an AnyConnect client establishes a new session toward an affected device. An attacker could exploit this vulnerability by establishing an AnyConnect connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8735"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-24T09:41:17.841Z", "date_only": false, "value": "2024-10-24T09:41:17.841+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3262", "record": "WID-SEC-W-2024-3262", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-24T16:39:38.139Z", "date_only": false, "value": "2024-10-24T16:39:38.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-20299", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-24T16:39:38.139Z", "date_only": false, "value": "2024-10-24T16:39:38.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-20299", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T21:19:17Z", "date_only": false, "value": "2024-10-24T21:19:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-10-24T21:19:17Z", "date_only": false, "value": "2024-10-24T21:19:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-13T15:45:08Z", "date_only": false, "value": "2025-10-13T15:45:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "record": "CISCO-SA-ASAFTD-ACL-BYPASS-VVNLNKQF", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-11T19:33:44.513Z", "date_only": false, "value": "2026-08-11T19:33:44.513", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20299", "record": "FKIE_CVE-2024-20299", "field": "lastModified"}]}
