CVE-2007-0058

Опубликовано: 04 янв. 2007

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

Ссылки

http://secunia.com/advisories/23556
Third Party Advisory
http://securitytracker.com/id?1017465
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml
Vendor Advisory
http://www.osvdb.org/32579
Broken Link
http://www.vupen.com/english/advisories/2007/0030
Third Party Advisory
http://secunia.com/advisories/23556
Third Party Advisory
http://securitytracker.com/id?1017465
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml
Vendor Advisory
http://www.osvdb.org/32579
Broken Link
http://www.vupen.com/english/advisories/2007/0030
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:*

Версия от 3.5.0 (включая) до 3.5.9 (включая)

cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:*

Версия от 3.6.0.0 (включая) до 3.6.1.1 (включая)

EPSS

Процентиль: 81%

0.01623

Низкий

7.8 High

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-25gj-576f-pwm3

github

больше 3 лет назад