Description
Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.
References (4)
Core 4
Core References
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/16472/
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14585
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21884
Scores
EPSS
0.0158
EPSS Percentile
73.1%
Details
Status
published
Products (20)
cisco/network_admission_control_manager_and_server_system_software
3.3
cisco/network_admission_control_manager_and_server_system_software
3.3.1
cisco/network_admission_control_manager_and_server_system_software
3.3.2
cisco/network_admission_control_manager_and_server_system_software
3.3.3
cisco/network_admission_control_manager_and_server_system_software
3.3.4
cisco/network_admission_control_manager_and_server_system_software
3.3.5
cisco/network_admission_control_manager_and_server_system_software
3.3.6
cisco/network_admission_control_manager_and_server_system_software
3.3.7
cisco/network_admission_control_manager_and_server_system_software
3.3.8
cisco/network_admission_control_manager_and_server_system_software
3.3.9
... and 10 more
Published
Aug 23, 2005
Tracked Since
Feb 18, 2026