PT-2007-1551 · Cisco · Cisco Clean Access

Published 2007-01-04 · Updated 2018-10-30 · CVE-2007-0058

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Clean Access (CCA) versions 3.5.x through 3.5.9 Cisco Clean Access (CCA) versions 3.6.x through 3.6.1.1

Description The issue allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

Recommendations For Cisco Clean Access (CCA) versions 3.5.x through 3.5.9, update to a version outside of this range to mitigate the risk. For Cisco Clean Access (CCA) versions 3.6.x through 3.6.1.1, update to a version outside of this range to mitigate the risk.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-0058

Affected Products

Cisco Clean Access

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-0058 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml · Vendor Advisory
• http://vupen.com/english/advisories/2007/0030 · Note
• http://securitytracker.com/id?1017465 · Note
• http://secunia.com/advisories/23556 · Note
• http://osvdb.org/32579 · Note