Anyconnect Secure Mobility Client Security Vulnerabilities and Issues — Anyconnect Secure Mobility Client CVE List

Lucene search

CiscoAnyconnect Secure Mobility Client

2 matches found

CVE•added 2015/09/26 1:59 a.m.•64 views

CVE-2015-6305

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by dbghelp.dll,...

7.2CVSS6.4AI score0.0264EPSS

CVE•added 2015/09/26 1:59 a.m.•40 views

CVE-2015-6306

Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.

7.2CVSS6.1AI score0.03548EPSS