The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
http://www.securitytracker.com/id/1032424 | vdb entry third party advisory |
http://tools.cisco.com/security/center/viewAlert.x?alertId=39018 | vendor advisory |