Authentication Bypass in Cisco Clean Access by Cisco Systems

CVE-2005-4332

Summary

Cisco Clean Access versions up to 3.5.5 on Secure Smart Manager are susceptible to an authentication bypass vulnerability. This allows remote attackers to send direct requests to obsolete JSP files, which can result in unauthorized file upload and potential denial of service (DoS). Specifically, the vulnerable files include admin/uploadclient.jsp, apply_firmware_action.jsp, and file.jsp, making systems using this software at risk for exploitation. Organizations should take immediate action to mitigate this vulnerability by updating to a secure version and monitoring their systems for suspicious activity.

References