Unscored CVE-2016-6369 EUVD-2016-7292GHSA-2gmp-cvhp-m5qp

Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain …

Published Aug 25, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.

References

1036697 vdb-entry
20160824 Cisco AnyConnect Secure Mobility Client Local Privilege Escalation Vulnerability vendor-advisory
92625 vdb-entry