CVEvulnerability
CVE-2015-0691
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-04-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264, CWE-78
Description
A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.
Affected configurations
• cisco secure desktop 3.0 base
• cisco secure desktop 3.1.0.31
• cisco secure desktop 3.1.1
• cisco secure desktop 3.1.1.45
• cisco secure desktop 3.1 base
• cisco secure desktop 3.2.0.136
• cisco secure desktop 3.2.1.103
• cisco secure desktop 3.2.1.126
• cisco secure desktop 3.2 base
• cisco secure desktop 3.3.0.118
• cisco secure desktop 3.3.0.151
• cisco secure desktop 3.3 base
• cisco secure desktop 3.4.0373
• cisco secure desktop 3.4.1108
• cisco secure desktop 3.4.2048
• cisco secure desktop 3.4 base
• cisco secure desktop 3.5.841
• cisco secure desktop 3.5.1077
• cisco secure desktop 3.5.2001
• cisco secure desktop 3.5.2003
• cisco secure desktop 3.5.2008
• cisco secure desktop 3.5 base
• cisco secure desktop 3.6.181
• cisco secure desktop 3.6.185
• cisco secure desktop 3.6.1001
• cisco secure desktop 3.6.2002
• cisco secure desktop 3.6.3002
• cisco secure desktop 3.6.4021
• cisco secure desktop 3.6.5005
• cisco secure desktop 3.6.6020
• cisco secure desktop 3.6.6104
• cisco secure desktop 3.6.6203
• cisco secure desktop 3.6.6210
• cisco secure desktop 3.6.6228
• cisco secure desktop 3.6.6234
• cisco secure desktop 3.6.6249
• cisco secure desktop 3.6 base
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150415-csd Mitigation, Vendor Advisory
- http://www.securitytracker.com/id/1032140 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150415-csd Mitigation, Vendor Advisory
- http://www.securitytracker.com/id/1032140 Third Party Advisory, VDB Entry