Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-5008
cisco
secure desktop
csd
bypass
policy
restrictions
executable
file
vulnerability
6.4 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.
Affected configurations
Node
ciscosecure_desktop
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:secure_desktop | cisco secure desktop | eq | * |
References
Related
prion
prion
Code injection
2010-10-14 05:52:00
nvd
nvd
CVE-2009-5008
2010-10-14 05:52:19
cvelist
cvelist
CVE-2009-5008
2022-10-03 16:24:01
6.4 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2009-5008