CVE-2005-2631

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

Affected Products (20)

cisco · network_admission_control_manager_and_server_system_softwarevulnerable

cisco · network_admission_control_manager_and_server_system_software

References (8)

http://secunia.com/advisories/16472/

PatchVendor Advisory

http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml

PatchVendor Advisory

http://www.securityfocus.com/bid/14585

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/21884

http://secunia.com/advisories/16472/

PatchVendor Advisory

http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml

PatchVendor Advisory

http://www.securityfocus.com/bid/14585