Description
Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.
References
- 23556 third-party-advisory
- 32579 vdb-entry
- ADV-2007-0030 vdb-entry
- 20070103 Multiple Vulnerabilities in Cisco Clean Access vendor-advisory
- 1017465 vdb-entry