Cisco Clean Access Multiple JSP Pages Access Validation Vulnerability
BID:15909
Info
Cisco Clean Access Multiple JSP Pages Access Validation Vulnerability
| Bugtraq ID: | 15909 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2005 12:00AM |
| Updated: | Dec 16 2005 12:00AM |
| Credit: | Alex Lanstein discovered this issue. |
| Vulnerable: |
Cisco Cisco Clean Access (CCA) 3.5.5 Cisco Cisco Clean Access (CCA) 3.5.4 Cisco Cisco Clean Access (CCA) 3.5.3 Cisco Cisco Clean Access (CCA) 3.5.2 Cisco Cisco Clean Access (CCA) 3.5.1 Cisco Cisco Clean Access (CCA) 3.5 Cisco Cisco Clean Access (CCA) 3.4.5 Cisco Cisco Clean Access (CCA) 3.4.4 Cisco Cisco Clean Access (CCA) 3.4.3 Cisco Cisco Clean Access (CCA) 3.4.2 Cisco Cisco Clean Access (CCA) 3.4.1 Cisco Cisco Clean Access (CCA) 3.4 Cisco Cisco Clean Access (CCA) 3.3.9 Cisco Cisco Clean Access (CCA) 3.3.8 Cisco Cisco Clean Access (CCA) 3.3.7 Cisco Cisco Clean Access (CCA) 3.3.6 Cisco Cisco Clean Access (CCA) 3.3.5 Cisco Cisco Clean Access (CCA) 3.3.4 Cisco Cisco Clean Access (CCA) 3.3.3 Cisco Cisco Clean Access (CCA) 3.3.2 Cisco Cisco Clean Access (CCA) 3.3.1 Cisco Cisco Clean Access (CCA) 3.3 |
| Not Vulnerable: |
Cisco Cisco Clean Access (CCA) 3.6 .0.1 Cisco Cisco Clean Access (CCA) 3.5 (9) |
Discussion
Cisco Clean Access Multiple JSP Pages Access Validation Vulnerability
Cisco Clean Access is prone to a vulnerability that could allow unauthorized users to access various Web server JSP pages.
This could allow an attacker to upload unauthorized data, cause denial of service issues, and possibly take unauthorized actions through accessing inappropriate JSP pages.
Cisco Clean Access version 3.5.5 is reported vulnerable; prior versions may also be affected.
Cisco has stated that this issue is being tracked by bug ID CSCsc85405.
Cisco Clean Access is prone to a vulnerability that could allow unauthorized users to access various Web server JSP pages.
This could allow an attacker to upload unauthorized data, cause denial of service issues, and possibly take unauthorized actions through accessing inappropriate JSP pages.
Cisco Clean Access version 3.5.5 is reported vulnerable; prior versions may also be affected.
Cisco has stated that this issue is being tracked by bug ID CSCsc85405.
Exploit / POC
Cisco Clean Access Multiple JSP Pages Access Validation Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Cisco Clean Access Multiple JSP Pages Access Validation Vulnerability
Solution:
Cisco has responded to this issue. Please see the referenced advisory for further information on obtaining and applying fixes.
Solution:
Cisco has responded to this issue. Please see the referenced advisory for further information on obtaining and applying fixes.
References
Cisco Clean Access Multiple JSP Pages Access Validation Vulnerability
References:
References:
- Cisco Clean Access Product Page (Cisco)
- Cisco Security Response: DoS in Cisco Clean Access (Clayton Kossmeyer
- DoS in Cisco Clean Access ([email protected])