Vulnerability in Cisco Anyconnect Secure Mobility Client

CVE-2015-0755

The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.

EPSS: 0.003 (24.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Anyconnect_secure_mobility_client — versions 4.0\(64\)
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)