CVE-2015-4289

published 2015-08-01

CVE-2015-4289: Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted…

medium 6.4 CVSS 3.1

AV N AC L Au N C N I P A P

Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted configuration attribute, aka Bug ID CSCut93920.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
cisco	anyconnect_secure_mobility_client	—	—

CWE-22 CWE-20