CVE-2015-4289: Path Traversal

Published Aug 1, 2015

Updated

Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted configuration attribute, aka Bug ID CSCut93920.

Affected Software

1 affected component

cisco AnyConnect Secure Mobility Client=4.0\(2049\)

Event History

Aug 1, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4289?

CVE-2015-4289 has a high severity rating due to its potential to allow unauthorized file write access.

How do I fix CVE-2015-4289?

To mitigate CVE-2015-4289, you should upgrade to a fixed version of Cisco AnyConnect Secure Mobility Client that is not affected by this vulnerability.

What systems are affected by CVE-2015-4289?

CVE-2015-4289 specifically affects Cisco AnyConnect Secure Mobility Client version 4.0(2049).

What type of vulnerability is CVE-2015-4289?

CVE-2015-4289 is classified as a directory traversal vulnerability that can be exploited through crafted configuration attributes.

Can CVE-2015-4289 be exploited remotely?

Yes, CVE-2015-4289 can be exploited remotely by attackers through remote head-end systems.