CVE-2024-20338

CVE-2024-20338 Advisory Dieses Repository enthält Demo-Dateien für meinen Vortrag auf der Behind The Code Konferenz in Limassol. Haftungsausschluss Alle diese Materialien werden wie besehen bereitgestellt und dienen ausschließlich zu Bildungszwecken. Der Autor übernimmt keine Verantwortung für...

Exploit for Uncontrolled Search Path Element in Cisco Secure_Client

CVE-2024-20338 advisoryhttps://sec.cloudapps.cisco.com/sec...

Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation (cisco-sa-secure-privesc-sYxQO6ds)

According to its self-reported version, Cisco Secure Client for Linux with ISE Posture Module is affected by a privilege escalation vulnerability. - A vulnerability in the ISE Posture System Scan module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate...

CVE-2024-20338

Cisco Secure Client for Linux contains a privilege-escalation flaw in the ISE Posture (System Scan) module caused by an uncontrolled search path element. An authenticated, local attacker could place a malicious library in a targeted filesystem location and, after prompting an admin to restart a p...