imPC@ndo IT

Tracker / CVE-2007-0058

CVE-2007-0058

High 7.8

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

Affected products and versions

cisco network_admission_control_manager_and_server_system_software · 3.5.0 → 3.5.9
cisco network_admission_control_manager_and_server_system_software · 3.6.0.0 → 3.6.1.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References