Lucene search

CiscoCVE-2015-0755

HistoryMay 29, 2015 - 3:59 p.m.

CVE-2015-0755

2015-05-2915:59:09

CWE-284

cisco

web.nvd.nist.gov

cisco

ise

posture module

privilege escalation

vulnerability

cve-2015-0755

nvd

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.

Affected configurations

Nvd

Node

ciscoanyconnect_secure_mobility_clientMatch4.0\(64\)

VendorProductVersionCPE
ciscoanyconnect_secure_mobility_client4.0(64)cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(64\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	anyconnect_secure_mobility_client	4.0(64)	cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(64\):::::::*

References

tools.cisco.com/security/center/viewAlert.x?alertId=39018

www.securitytracker.com/id/1032424

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2015-0755