Description
Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64586
Release Notes, Vendor Advisory x_refsource_confirm
http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/45769
Scores
EPSS
0.0077
EPSS Percentile
50.8%
Details
CWE
CWE-295
Status
published
Products (1)
cisco/ios
< 15.0\(1\)xa1
Published
Jan 07, 2011
Tracked Since
Feb 18, 2026