Lucene search
HistoryOct 12, 2015 - 10:59 a.m.
CVE-2015-6322
cisco
anyconnect
secure mobility client
ipc channel
vulnerability
bug id
cscuv48563
nvd
cve-2015-6322
6.6 Medium
AI Score
Confidence
Low
6.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.
Related
prion
prion
Input validation
2015-10-12 10:59:00
nessus
nessus
cvelist
cvelist
CVE-2015-6322
2015-10-12 10:00:00
cisco
cisco
Cisco AnyConnect Secure Mobility Client Arbitrary File Move Vulnerability
2015-10-08 14:26:00
6.6 Medium
AI Score
Confidence
Low
6.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2015-6322