CVE-2015-6322 — Cisco Anyconnect Secure Mobility Client vulnerability

CWE-2644 documents4 sources
Severity
6.6MEDIUMNVD
EPSS
0.1%
top 73.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Anyconnect Secure Mobility Client
Timeline
PublishedOct 12
Latest updateMay 17

Description

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.

CVSS vector

AV:L/AC:L/C:N/I:C/A:CExploitability: 3.9 | Impact: 9.2

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-wgf2-prq4-m36f: The IPC channel in Cisco AnyConnect Secure Mobility Client 2↗2022-05-17
▶
CVEList
CVE-2015-6322: The IPC channel in Cisco AnyConnect Secure Mobility Client 2↗2015-10-12
▶

📋Vendor Advisories

1
Cisco
Cisco AnyConnect Secure Mobility Client Arbitrary File Move Vulnerability↗2015-10-08
▶
CVE-2015-6322 — Cisco vulnerability | cvebase