CVE-2005-2631

CVE-2005-2631

EPSS 1.6%

Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/16472/https://exchange.xforce.ibmcloud.com/vulnerabilities/21884 http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml http://www.securityfocus.com/bid/14585