Unscored CVE-2015-4289 EUVD-2015-4312GHSA-h83x-38m4-m38j

Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary…

Published Aug 1, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted configuration attribute, aka Bug ID CSCut93920.

References

20150730 Cisco AnyConnect Secure Mobilty Client Directory Traversal Vulnerability vendor-advisory
1033173 vdb-entry