CVEvulnerability
CVE-2007-0058
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-200
Description
Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.
Affected configurations
• cisco network admission control manager and server system software (>= 3.5.0 <= 3.5.9)
• cisco network admission control manager and server system software (>= 3.6.0.0 <= 3.6.1.1)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/23556 Third Party Advisory
- http://securitytracker.com/id?1017465 Third Party Advisory, VDB Entry
- http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml Vendor Advisory
- http://www.osvdb.org/32579 Broken Link
- http://www.vupen.com/english/advisories/2007/0030 Third Party Advisory
- http://secunia.com/advisories/23556 Third Party Advisory
- http://securitytracker.com/id?1017465 Third Party Advisory, VDB Entry
- http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml Vendor Advisory
- http://www.osvdb.org/32579 Broken Link
- http://www.vupen.com/english/advisories/2007/0030 Third Party Advisory