CVEvulnerability
CVE-2015-6265
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-08-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The CLI in Cisco Application Control Engine (ACE) 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662.
Affected configurations
• cisco application control engine 4700 (<= a5 base 3.0)
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=40666 Vendor Advisory
- http://www.securityfocus.com/bid/76491 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033381 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=40666 Vendor Advisory
- http://www.securityfocus.com/bid/76491 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033381 Third Party Advisory, VDB Entry