CVE-2015-0761

Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/viewAlert.x?alertId=39158	Vendor Advisory
http://www.securityfocus.com/bid/74954	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032472	Third Party Advisory VDB Entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=39158	Vendor Advisory
http://www.securityfocus.com/bid/74954	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032472	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:anyconnect_secure_mobility_client::::::::
	cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(.00048\):::::::*
	cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(.00051\):::::::*

History

No history.

Information

Published : 2015-06-04 10:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-0761

Mitre link : CVE-2015-0761

CVE.ORG link : CVE-2015-0761

JSON object : View

Products Affected

cisco

anyconnect_secure_mobility_client

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-0761", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-06-04T10:59:01.520", "references": [{"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39158", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}, {"url": "http://www.securityfocus.com/bid/74954", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@cisco.com"}, {"url": "http://www.securitytracker.com/id/1032472", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@cisco.com"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39158", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/74954", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1032472", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790."}, {"lang": "es", "value": "Cisco AnyConnect Secure Mobility Client anterior a 3.1(8009) y 4.x anterior a 4.0(2052) en Linux no implementa correctamente las funciones internas no especificadas, lo que permite a usuarios locales obtener privilegios root a trav\u00e9s de opciones vpnagent manipuladas, tambi\u00e9n conocido como Bug ID CSCus86790."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C19362A-40B8-4DC9-BCDE-7C350D77D843", "versionEndIncluding": "3.1\\(.07021\\)"}, {"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\\(.00048\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A6CBC58-11AC-4911-989C-5D465E12A3C3"}, {"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\\(.00051\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E0E90FA-64A4-46F4-8EA0-134A7FAE4690"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}