Cisco Adaptive Security Appliance Information Disclosure Vulnerability (CNVD-2016-00384)

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. Cisco Adaptive Security Appliance ASA Software version 8.4 failed to effectively protect sensitive data during AnyConnect clien...

CVE-2016-1295

Cisco Adaptive Security Appliance ASA Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775...

CVE-2016-1295

Cisco Adaptive Security Appliance ASA Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775...

CVE-2016-1295

Cisco Adaptive Security Appliance ASA Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775...

Cisco Adaptive Security Appliance Information Disclosure Vulnerability

A vulnerability in the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to access sensitive data, including the ASA Software version that is currently running on the appliance. The vulnerability occurs because the Cisco ASA does not sufficiently protect...

PT-2016-4688 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 8.4 Description: A remote attacker can obtain sensitive information via an AnyConnect authentication attempt. This issue allows an unauthenticated, remote attacker to access sensitive dat...

Cisco AnyConnect Secure Mobility Client 2.x < 3.1.13015.0 / 4.x < 4.2.1035.0 Arbitrary File Manipulation

The Cisco AnyConnect Secure Mobility Client installed on the remote host is version 2.x or 3.x prior to 3.1.13015.0 or 4.x prior to 4.2.1035.0. It is, therefore, affected by an arbitrary file manipulation vulnerability due to missing source path validation in interprocess communication IPC...

The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection allows a hacker to gain root user privileges.

The vulnerability of the Cisco AnyConnect Secure Mobility Client encryption method is related to errors in function processing. Exploiting this vulnerability can allow a local attacker to gain root user privileges using the vpnagent option...

The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection mechanism allows attackers to enhance their privileges.

The vulnerability of the Posture module, which is part of the Cisco Identity Services Engine ISE of the Cisco AnyConnect Secure Mobility Client encryption protection tool, is related to access control deficiencies. Exploiting this vulnerability can allow an intruder, operating locally, to increas...

The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection allows a perpetrator to move arbitrary files.

The vulnerability of the Cisco AnyConnect Secure Mobility Client’s IPC channel implementation is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to move arbitrary files around...

CVE-2015-6322

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.18 allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563...

Input validation

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.18 allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563...

CVE-2015-6322

CVE-2015-6322 affects Cisco AnyConnect Secure Mobility Client IPC channel. The vulnerability arises from missing source-path validation in IPC commands, allowing a local attacker to bypass access restrictions and move arbitrary files with elevated privileges. Affected products include AnyConnect ...

CVE-2015-6322

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.18 allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563...

Cisco AnyConnect privilege escalation

Privilege escalation via DLLs and DMG files...

Cisco AnyConnect elevation of privileges via DMG install script

------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DMG install script ------------------------------------------------------------------------ Yorick Koster, July 2015...

Cisco AnyConnect elevation of privileges via DLL side loading

------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DLL side loading ------------------------------------------------------------------------ Yorick Koster, June 2015...

Cisco AnyConnect Secure Mobility Client IPC Command File Modification Vulnerability

Cisco AnyConnect Secure Mobility is a secure enterprise mobility solution. Cisco AnyConnect Secure Mobility Client fails to properly validate IPC commands, allowing a local attacker to exploit the vulnerability to modify arbitrary files with elevated privileges...

Cisco AnyConnect Secure Mobility Client Arbitrary File Move Vulnerability

A vulnerability in interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to move arbitrary files with elevated privileges. The vulnerability is due to missing source path validation in certain IPC commands. An attacker could...