PT-2011-3562 · Cisco · Cisco Anyconnect Secure Mobility Client

Published 2011-06-02 · Updated 2011-09-07 · CVE-2011-2041

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.3.254

Description The issue concerns the Start Before Logon (SBL) functionality, which allows local users to gain privileges through unspecified user-interface interaction.

Recommendations For versions prior to 2.3.254, update to version 2.3.254 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-2041

Affected Products

Cisco Anyconnect Secure Mobility Client

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-2041 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml · Vendor Advisory
• http://securitytracker.com/id?1025591 · Note
• http://osvdb.org/72716 · Note
• http://securityfocus.com/bid/48077 · Note