CVEvulnerability
CVE-2015-0665
6.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.6 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:C
- Weaknesses
- CWE-22
Description
The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.
Affected configurations
• cisco anyconnect secure mobility client (<= 4.0\(.00051\))
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37862 Vendor Advisory
- http://www.securitytracker.com/id/1031931 www.securitytracker.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37862 Vendor Advisory
- http://www.securitytracker.com/id/1031931 www.securitytracker.com