4.8
Medium
CVE-2019-1853 A vulnerability in the HostScan component of Cisco AnyConnect Secure Mobility Client for Linux could allow an…
Description
A vulnerability in the HostScan component of Cisco AnyConnect Secure Mobility Client for Linux could allow an unauthenticated, remote attacker to read sensitive information on an affected system. The vulnerability exists because the affected software performs improper bounds checks. An attacker could exploit this vulnerability by crafting HTTP traffic for the affected component to download and process. A successful exploit could allow the attacker to read sensitive information on the affected system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco AnyConnect Secure Mobility Client | Versions not published |
References
- 20190515 Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability tools.cisco.com
- 108364 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco AnyConnect Secure Mobility Client
The 23 CVEs of Cisco AnyConnect Secure Mobility Client →
CVE-2021-40124
A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows…
6.7
Medium
CVE-2021-34788
A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac…
7.0
High
CVE-2021-1567
A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an…
7.0
High
CVE-2021-1568
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to…
5.5
Medium