CVEvulnerability
CVE-2015-0761
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790.
Affected configurations
• cisco anyconnect secure mobility client (<= 3.1\(.07021\))
• cisco anyconnect secure mobility client 4.0\(.00048\)
• cisco anyconnect secure mobility client 4.0\(.00051\)
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39158 Vendor Advisory
- http://www.securityfocus.com/bid/74954 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032472 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39158 Vendor Advisory
- http://www.securityfocus.com/bid/74954 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032472 Third Party Advisory, VDB Entry