CVE-2010-4685

published 2011-01-07

CVE-2010-4685: Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a…

medium 4 CVSS 3.1

AV N AC L Au S C P I N A N

Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	ios	< 15.0\(1\)xa1	15.0\(1\)xa1
cisco	ios	—	—
cisco	ios	—	—

CWE-295