cisco-sa-anyconnect-fileread-PbHbgHMj: Cisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability
First published: Wed Jan 13 2021(Updated: )
A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the local CLI to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying OS of the affected device. The attacker would need to have valid user credentials to exploit this vulnerability. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-fileread-PbHbgHMj
Credit: Michael Henry Facebook
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AnyConnect Secure Mobility Client |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-anyconnect-fileread-PbHbgHMj?
The severity of cisco-sa-anyconnect-fileread-PbHbgHMj is evaluated with a critical rating due to the potential for arbitrary file reading.
How do I fix cisco-sa-anyconnect-fileread-PbHbgHMj?
To fix cisco-sa-anyconnect-fileread-PbHbgHMj, update Cisco AnyConnect Secure Mobility Client to the latest version as recommended by Cisco.
Who is affected by cisco-sa-anyconnect-fileread-PbHbgHMj?
Users of Cisco AnyConnect Secure Mobility Client versions prior to the patch release are affected by cisco-sa-anyconnect-fileread-PbHbgHMj.
What could an attacker do with cisco-sa-anyconnect-fileread-PbHbgHMj?
An authenticated, local attacker could read arbitrary files on the underlying operating system if exploiting cisco-sa-anyconnect-fileread-PbHbgHMj.
Is user authentication required to exploit cisco-sa-anyconnect-fileread-PbHbgHMj?
Yes, user authentication is required to exploit cisco-sa-anyconnect-fileread-PbHbgHMj, as the attacker must have low privileges on the device.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/title
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco anyconnect secure mobility client