CVEvulnerability
CVE-2005-2631
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.
Affected configurations
• cisco network admission control manager and server system software 3.3
• cisco network admission control manager and server system software 3.3.1
• cisco network admission control manager and server system software 3.3.2
• cisco network admission control manager and server system software 3.3.3
• cisco network admission control manager and server system software 3.3.4
• cisco network admission control manager and server system software 3.3.5
• cisco network admission control manager and server system software 3.3.6
• cisco network admission control manager and server system software 3.3.7
• cisco network admission control manager and server system software 3.3.8
• cisco network admission control manager and server system software 3.3.9
• cisco network admission control manager and server system software 3.4
• cisco network admission control manager and server system software 3.4.1
• cisco network admission control manager and server system software 3.4.2
• cisco network admission control manager and server system software 3.4.3
• cisco network admission control manager and server system software 3.4.4
• cisco network admission control manager and server system software 3.4.5
• cisco network admission control manager and server system software 3.5
• cisco network admission control manager and server system software 3.5.1
• cisco network admission control manager and server system software 3.5.2
• cisco network admission control manager and server system software 3.5.3
References
- http://secunia.com/advisories/16472/ Patch, Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14585 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21884 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/16472/ Patch, Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14585 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21884 exchange.xforce.ibmcloud.com