PT-2007-1551 · Cisco · Cisco Clean Access

Publicado 2007-01-04 · Atualizado 2018-10-30 · CVE-2007-0058

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Clean Access (CCA) versions 3.5.x through 3.5.9 Cisco Clean Access (CCA) versions 3.6.x through 3.6.1.1

Description The issue allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

Recommendations For Cisco Clean Access (CCA) versions 3.5.x through 3.5.9, update to a version outside of this range to mitigate the risk. For Cisco Clean Access (CCA) versions 3.6.x through 3.6.1.1, update to a version outside of this range to mitigate the risk.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-0058

Produtos afetados

Cisco Clean Access

Referências · 6

• http://vupen.com/english/advisories/2007/0030 · Nota
• http://securitytracker.com/id?1017465 · Nota
• http://secunia.com/advisories/23556 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0058 · Nota de Segurança
• http://osvdb.org/32579 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml · Aviso do Fabricante