Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8w45-828p-q375

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

EPSS

Процентиль: 58%
0.00363
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

EPSS

Процентиль: 58%
0.00363
Низкий