CVE-2015-0691

2015-04-1701:59:00

CWE-78

CWE-264

[email protected]

web.nvd.nist.gov

cisco

jar file

cache cleaner

cisco secure desktop

cscup83001

remote attackers

arbitrary commands

crafted web site

cve-2015-0691

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

59.5%

JSON

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.

CPENameOperatorVersion
cisco:secure_desktopcisco secure desktopeq3.6.6234
cisco:secure_desktopcisco secure desktopeq3.6.3002
cisco:secure_desktopcisco secure desktopeq3.2.1.126
cisco:secure_desktopcisco secure desktopeq3.6.185
cisco:secure_desktopcisco secure desktopeq3.6.2002
cisco:secure_desktopcisco secure desktopeq3.1.1.45
cisco:secure_desktopcisco secure desktopeq3.6_base
cisco:secure_desktopcisco secure desktopeq3.3.0.118
cisco:secure_desktopcisco secure desktopeq3.1_base
cisco:secure_desktopcisco secure desktopeq3.6.6203

CPE	Name	Operator	Version
cisco:secure_desktop	cisco secure desktop	eq	3.6.6234
cisco:secure_desktop	cisco secure desktop	eq	3.6.3002
cisco:secure_desktop	cisco secure desktop	eq	3.2.1.126
cisco:secure_desktop	cisco secure desktop	eq	3.6.185
cisco:secure_desktop	cisco secure desktop	eq	3.6.2002
cisco:secure_desktop	cisco secure desktop	eq	3.1.1.45
cisco:secure_desktop	cisco secure desktop	eq	3.6_base
cisco:secure_desktop	cisco secure desktop	eq	3.3.0.118
cisco:secure_desktop	cisco secure desktop	eq	3.1_base
cisco:secure_desktop	cisco secure desktop	eq	3.6.6203