Unscored CVE-2015-4211 EUVD-2015-4234GHSA-vjvj-gr2r-88wq

Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privilege…

Published Jun 24, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862.

References

20150623 Cisco AnyConnect Client for Windows Privilege Escalation Vulnerability vendor-advisory
1032704 vdb-entry
75373 vdb-entry