Cisco AnyConnect DMG Install Script Privilege Escalation
Posted by deepcore on September 24, 2015 – 10:36 am
Cisco AnyConnect Secure Mobility Client for OS X is affected by a vulnerability that allows local attackers to mount arbitrary DMG files at arbitrary mount points. By exploiting this vulnerability is is possible for the attacker to gain root privileges. Cisco reports that a similar issue also exists in Cisco AnyConnect Secure Mobility Client for Linux.
Post a reply
You must be logged in to post a comment.