PT-2015-7566
CVE-2015-7600
·
تاريخ النشر
2015-10-06
·
تاريخ التحديث
2017-01-05
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco VPN Client versions 5.x through 5.0.07.0440
Description
The issue allows local users to gain privileges by entering an arbitrary program name in the
Command field of the ApplicationLauncher section in the vpnclient.ini file, due to weak permissions used by the software.Recommendations
For versions 5.x through 5.0.07.0440, consider restricting access to the vpnclient.ini file to prevent local users from modifying the ApplicationLauncher section until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾