PT-2005-3521 · Cisco · Cisco Clean Access

Published 2005-08-20 · Updated 2018-10-30 · CVE-2005-2631

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Clean Access (CCA) versions 3.3.0 through 3.3.9 Cisco Clean Access (CCA) versions 3.4.0 through 3.4.5 Cisco Clean Access (CCA) versions 3.5.0 through 3.5.3

Description The issue concerns improper user authentication when invoking API methods. This could allow remote attackers to bypass security checks, change a user's assigned role, or disconnect users.

Recommendations For versions 3.3.0 through 3.3.9, update to a version that properly authenticates users when invoking API methods. For versions 3.4.0 through 3.4.5, update to a version that properly authenticates users when invoking API methods. For versions 3.5.0 through 3.5.3, update to a version that properly authenticates users when invoking API methods.

Fix

Related Identifiers

CVE-2005-2631

Affected Products

Cisco Clean Access

References · 5

• http://secunia.com/advisories/16472 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2631 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml · Vendor Advisory
• http://securityfocus.com/bid/14585 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21884 · Note