CVEvulnerability

CVE-2015-0691

9.3 HIGH Published 2015-04-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-04-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264, CWE-78

Description

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.

Affected configurations

• cisco secure desktop 3.0 base • cisco secure desktop 3.1.0.31 • cisco secure desktop 3.1.1 • cisco secure desktop 3.1.1.45 • cisco secure desktop 3.1 base • cisco secure desktop 3.2.0.136 • cisco secure desktop 3.2.1.103 • cisco secure desktop 3.2.1.126 • cisco secure desktop 3.2 base • cisco secure desktop 3.3.0.118 • cisco secure desktop 3.3.0.151 • cisco secure desktop 3.3 base • cisco secure desktop 3.4.0373 • cisco secure desktop 3.4.1108 • cisco secure desktop 3.4.2048 • cisco secure desktop 3.4 base • cisco secure desktop 3.5.841 • cisco secure desktop 3.5.1077 • cisco secure desktop 3.5.2001 • cisco secure desktop 3.5.2003 • cisco secure desktop 3.5.2008 • cisco secure desktop 3.5 base • cisco secure desktop 3.6.181 • cisco secure desktop 3.6.185 • cisco secure desktop 3.6.1001 • cisco secure desktop 3.6.2002 • cisco secure desktop 3.6.3002 • cisco secure desktop 3.6.4021 • cisco secure desktop 3.6.5005 • cisco secure desktop 3.6.6020 • cisco secure desktop 3.6.6104 • cisco secure desktop 3.6.6203 • cisco secure desktop 3.6.6210 • cisco secure desktop 3.6.6228 • cisco secure desktop 3.6.6234 • cisco secure desktop 3.6.6249 • cisco secure desktop 3.6 base

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References