CVE-2015-6306: High severity cisco anyconnect secure vulnerability

Published Sep 25, 2015

Updated

Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.

Affected Software

3 affected components

Cisco AnyConnect Secure Mobility Client=4.1.\(8\)

Apple iOS and macOS

Linux Linux kernel

Remediation

Patch Available

https://www.securify.nl/advisory/SFY20150701/cisco_anyconnect_elevation_%20of_privileges_via_dmg_install_script.html

Event History

Sep 25, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6306?

CVE-2015-6306 has a high severity rating due to its potential to allow local users to gain root privileges.

How do I fix CVE-2015-6306?

To mitigate CVE-2015-6306, upgrade to a patched version of Cisco AnyConnect Secure Mobility Client that addresses this vulnerability.

Which systems are affected by CVE-2015-6306?

CVE-2015-6306 specifically affects Cisco AnyConnect Secure Mobility Client version 4.1(8) on OS X and Linux.

Can CVE-2015-6306 be exploited remotely?

CVE-2015-6306 requires local access to the machine, so it cannot be exploited remotely.

What is the impact of CVE-2015-6306?

The impact of CVE-2015-6306 is that it allows a local user to execute arbitrary code with elevated privileges.