CVE-2005-2631 | BDVDB-2026-12227 Detail

Description#

Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/16472/
http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml
http://www.securityfocus.com/bid/14585
https://exchange.xforce.ibmcloud.com/vulnerabilities/21884

Exploit#

No public exploit known

History#

Version 12005-08-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.