CVEvulnerability
CVE-2009-5008
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.
Affected configurations
• cisco secure desktop
Related
Weakness · not in database (1)
References
- http://www.infradead.org/openconnect.html www.infradead.org
- http://www.infradead.org/openconnect.html www.infradead.org