cbcvebase.
CVE-2015-6322
published 2015-10-12

CVE-2015-6322: The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary…

medium6.6CVSS 3.1
AVLACLAuNCNICAC
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.

Affected

53 ranges· showing 25
VendorProductVersion rangeFixed in
ciscoanyconnect_secure_mobility
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client