PT-2011-3562 · Cisco · Cisco Anyconnect Secure Mobility Client

Publicado 2011-06-02 · Atualizado 2011-09-07 · CVE-2011-2041

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.3.254

Description The issue concerns the Start Before Logon (SBL) functionality, which allows local users to gain privileges through unspecified user-interface interaction.

Recommendations For versions prior to 2.3.254, update to version 2.3.254 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2041

Produtos afetados

Cisco Anyconnect Secure Mobility Client

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-2041 · Nota de Segurança
• http://securitytracker.com/id?1025591 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml · Aviso do Fabricante
• http://osvdb.org/72716 · Nota
• http://securityfocus.com/bid/48077 · Nota