CVE-2015-6306

published 2015-09-26

CVE-2015-6306: Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root…

high 7.2 CVSS 3.1

AV L AC L Au N C C I C A C

EXPLOIT

Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
cisco	anyconnect_secure_mobility_client	—	—

CWE-264