Aller au contenu
en Se connecter
7.3 Élevée

CVE-2024-20338 A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated,…

Description

A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path element. An attacker could exploit this vulnerability by copying a malicious library file to a specific directory in the filesystem and persuading an administrator to restart a specific process. A successful exploit could allow the attacker to execute arbitrary code on an affected device with root privileges.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Secure Client Versions non publiées
secure_client 5.1 premières → < 5.1.2.42 5.1.2.42

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Secure Client

Les 10 CVE de Cisco Secure Client →
CVE-2026-76462 A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure… 5.5 Moyenne CVE-2025-20206 A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an… 7.1 Élevée CVE-2020-3432 A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an… 5.6 Moyenne CVE-2024-20474 A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an… 4.3 Moyenne
Suivre cette CVE