Authentication Bypass in Cisco Clean Access Manager
CVE-2007-0058

Currently unrated

Key Information:

Vendor
Cisco
Status
Network Admission Control Manager And Server System Software
Vendor
CVE Published:
4 January 2007

Summary

The Cisco Clean Access Manager (CAM) versions 3.5.x up to 3.5.9 and 3.6.x up to 3.6.1.1 are susceptible to an authentication bypass vulnerability. Attackers can exploit this flaw by using brute-force techniques to guess snapshot filenames, allowing them to make unauthorized requests for manual database backups. This could lead to potential data exposure and security breaches if not properly mitigated.

References

http://secunia.com/advisories/23556
third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/32579
vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2007/0030
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.