Description
Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion".
References
- cisco-csd-application-security-bypass(30130) vdb-entry
- 1017195 vdb-entry
- 22747 third-party-advisory
- 30307 vdb-entry
- 20061108 Multiple Vulnerabilities in Cisco Secure Desktop vendor-advisory
- ADV-2006-4409 vdb-entry
- 20964 vdb-entry