Authentication Bypass in Cisco Clean Access by Cisco Systems
CVE-2005-4332
Currently unrated
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 17 December 2005
What is CVE-2005-4332?
Cisco Clean Access versions up to 3.5.5 on Secure Smart Manager are susceptible to an authentication bypass vulnerability. This allows remote attackers to send direct requests to obsolete JSP files, which can result in unauthorized file upload and potential denial of service (DoS). Specifically, the vulnerable files include admin/uploadclient.jsp, apply_firmware_action.jsp, and file.jsp, making systems using this software at risk for exploitation. Organizations should take immediate action to mitigate this vulnerability by updating to a secure version and monitoring their systems for suspicious activity.