Vulnerabilities > Cisco > Anyconnect Secure Mobility Client > 2.5.base

DATE CVE VULNERABILITY TITLE RISK
2016-08-25 CVE-2016-6369 Permissions, Privileges, and Access Controls vulnerability in Cisco Anyconnect Secure Mobility Client
Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.
local
low complexity
cisco CWE-264
7.8