Cisco AnyConnect Secure Mobility Client Local Information Disclosure Vulnerability

BID:107884

Info

Cisco AnyConnect Secure Mobility Client Local Information Disclosure Vulnerability

Bugtraq ID: 107884
Class: Design Error
CVE:
Remote: No
Local: Yes
Published: Apr 11 2019 12:00AM
Updated: Apr 11 2019 12:00AM
Credit: National Defense ISAC Remote Access Working Group
Vulnerable: Cisco AnyConnect Secure Mobility Client 4.7
Cisco AnyConnect Secure Mobility Client 4.4.2034
Cisco AnyConnect Secure Mobility Client 4.4.1054
Cisco AnyConnect Secure Mobility Client 4.4.243
Cisco AnyConnect Secure Mobility Client 4.3.5017
Cisco AnyConnect Secure Mobility Client 4.3.4027
Cisco AnyConnect Secure Mobility Client 4.3.3086
Cisco AnyConnect Secure Mobility Client 4.3.2039
Cisco AnyConnect Secure Mobility Client 4.3.1095
Cisco AnyConnect Secure Mobility Client 4.1
Cisco AnyConnect Secure Mobility Client 4.0.51
Cisco AnyConnect Secure Mobility Client 4.0.48
Cisco AnyConnect Secure Mobility Client 4.0
Cisco AnyConnect Secure Mobility Client 3.2
Cisco AnyConnect Secure Mobility Client 3.1.14018
Cisco AnyConnect Secure Mobility Client 3.1.7021
Cisco AnyConnect Secure Mobility Client 3.1.6073
Cisco AnyConnect Secure Mobility Client 3.1.5187
Cisco AnyConnect Secure Mobility Client 3.1.5182
Cisco AnyConnect Secure Mobility Client 3.1.2043
Cisco AnyConnect Secure Mobility Client 3.1.495
Cisco AnyConnect Secure Mobility Client 3.1
Cisco AnyConnect Secure Mobility Client 3.0.9353
Cisco AnyConnect Secure Mobility Client 3.0.9266
Cisco AnyConnect Secure Mobility Client 3.0.9231
Cisco AnyConnect Secure Mobility Client 3.0.8066
Cisco AnyConnect Secure Mobility Client 3.0.8057
Cisco AnyConnect Secure Mobility Client 3.0.7059
Cisco AnyConnect Secure Mobility Client 3.0.5080
Cisco AnyConnect Secure Mobility Client 3.0.5075
Cisco AnyConnect Secure Mobility Client 3.0.4235
Cisco AnyConnect Secure Mobility Client 3.0.3054
Cisco AnyConnect Secure Mobility Client 3.0.3050
Cisco AnyConnect Secure Mobility Client 3.0.2052
Cisco AnyConnect Secure Mobility Client 3.0.1047
Cisco AnyConnect Secure Mobility Client 3.0.629
Cisco AnyConnect Secure Mobility Client 3.0
Cisco AnyConnect Secure Mobility Client 2.5.6005
Cisco AnyConnect Secure Mobility Client 2.5.5131
Cisco AnyConnect Secure Mobility Client 2.5.5130
Cisco AnyConnect Secure Mobility Client 2.5.5125
Cisco AnyConnect Secure Mobility Client 2.5.5118
Cisco AnyConnect Secure Mobility Client 2.5.5116
Cisco AnyConnect Secure Mobility Client 2.5.5112
Cisco AnyConnect Secure Mobility Client 2.5.3055
Cisco AnyConnect Secure Mobility Client 2.5.3054
Cisco AnyConnect Secure Mobility Client 2.5.3051
Cisco AnyConnect Secure Mobility Client 2.5.2019
Cisco AnyConnect Secure Mobility Client 2.5.2018
Cisco AnyConnect Secure Mobility Client 2.5.2017
Cisco AnyConnect Secure Mobility Client 2.5.2014
Cisco AnyConnect Secure Mobility Client 2.5.2011
Cisco AnyConnect Secure Mobility Client 2.5.2010
Cisco AnyConnect Secure Mobility Client 2.5.2006
Cisco AnyConnect Secure Mobility Client 2.5.2001
Cisco AnyConnect Secure Mobility Client 2.5.1025
Cisco AnyConnect Secure Mobility Client 2.5.217
Cisco AnyConnect Secure Mobility Client 2.5
Cisco AnyConnect Secure Mobility Client 2.4.7073
Cisco AnyConnect Secure Mobility Client 2.4.7030
Cisco AnyConnect Secure Mobility Client 2.4.5004
Cisco AnyConnect Secure Mobility Client 2.4.4014
Cisco AnyConnect Secure Mobility Client 2.4.4004
Cisco AnyConnect Secure Mobility Client 2.4.1012
Cisco AnyConnect Secure Mobility Client 2.4.202
Cisco AnyConnect Secure Mobility Client 2.3.2016
Cisco AnyConnect Secure Mobility Client 2.3.1003
Cisco AnyConnect Secure Mobility Client 2.3.254
Cisco AnyConnect Secure Mobility Client 2.3.185
Cisco AnyConnect Secure Mobility Client 2.2.140
Cisco AnyConnect Secure Mobility Client 2.2.140
Cisco AnyConnect Secure Mobility Client 2.2.136
Cisco AnyConnect Secure Mobility Client 2.2.136
Cisco AnyConnect Secure Mobility Client 2.2.133
Cisco AnyConnect Secure Mobility Client 2.2.133
Cisco AnyConnect Secure Mobility Client 2.2.128
Cisco AnyConnect Secure Mobility Client 4.6
Cisco AnyConnect Secure Mobility Client 4.5
Cisco AnyConnect Secure Mobility Client 4.4
Cisco AnyConnect Secure Mobility Client 4.3
Cisco AnyConnect Secure Mobility Client 4.2
Cisco AnyConnect Secure Mobility Client 4.1 (8)
Cisco AnyConnect Secure Mobility Client 3.0.629
Cisco AnyConnect Secure Mobility Client 3.0
Cisco AnyConnect Secure Mobility Client 3
Cisco AnyConnect Secure Mobility Client 2.5.3046
Cisco AnyConnect Secure Mobility Client 2.5.3041
Cisco AnyConnect Secure Mobility Client 2.5
Cisco AnyConnect Secure Mobility Client 2.4
Cisco AnyConnect Secure Mobility Client 2.3.254
Cisco AnyConnect Secure Mobility Client 2.3.185
Cisco AnyConnect Secure Mobility Client 2.3
Cisco AnyConnect Secure Mobility Client 2.2
Cisco AnyConnect Secure Mobility Client 2.1
Cisco AnyConnect Secure Mobility Client 2
Not Vulnerable:

Discussion

Cisco AnyConnect Secure Mobility Client Local Information Disclosure Vulnerability

Cisco AnyConnect Secure Mobility Client is prone to a local information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

AnyConnect Secure Mobility Client 4.7.0 and prior are vulnerable.

References

Cisco AnyConnect Secure Mobility Client Local Information Disclosure Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report