CVE-2005-2631 (GCVE-0-2005-2631)
Vulnerability from cvelistv5 – Published: 2005-08-20 04:00 – Updated: 2024-08-07 22:30
VLAI?
Summary
Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:30:01.808Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "16472",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16472/"
},
{
"name": "20050817 Cisco Security Advisory: Cisco Clean Access Unauthenticated API Access",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml"
},
{
"name": "14585",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14585"
},
{
"name": "cisco-cca-security-bypass(21884)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21884"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-08-17T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "16472",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16472/"
},
{
"name": "20050817 Cisco Security Advisory: Cisco Clean Access Unauthenticated API Access",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml"
},
{
"name": "14585",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14585"
},
{
"name": "cisco-cca-security-bypass(21884)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21884"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2631",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "16472",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16472/"
},
{
"name": "20050817 Cisco Security Advisory: Cisco Clean Access Unauthenticated API Access",
"refsource": "CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml"
},
{
"name": "14585",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14585"
},
{
"name": "cisco-cca-security-bypass(21884)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21884"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2631",
"datePublished": "2005-08-20T04:00:00",
"dateReserved": "2005-08-20T00:00:00",
"dateUpdated": "2024-08-07T22:30:01.808Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D17AF7C3-3453-4343-AC57-B3BAACAD36E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D20F5D1-C28A-4D0E-B4BA-3F8A9B05933E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4FA3ABF2-F8D7-4D46-8862-072AD105AE5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"28B34BF7-B96E-4C6A-B6BD-803680629300\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"280C9607-98C6-44CE-9017-43592EC9D013\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F972C202-DEEB-49AD-BBE7-442CA0E975E1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"028ABC18-8944-474C-8482-2DC4F0E0B51B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DD764CC4-F985-4A2F-B744-0B07BE59534F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B450984-DF81-46FE-A3E2-16323D1E55A2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6133BA76-655F-4023-A5C5-31919D3C45E4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9A5D9FFC-728E-4E2A-9787-0748D0C88433\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8559F336-5A94-43ED-BF2E-0126038DA3C6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B7FE412A-DB93-41FC-85B3-38E46913BEB3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"63702A32-F7D3-46FF-B7B2-A845081D3AFE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF86C8A2-154B-49B3-B263-41826DC196BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2CC77562-5C30-4DA3-AFCD-7CD63D85E298\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B9CD71A6-724B-42C1-BBBD-456F74393909\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E6828C91-18F9-4E36-B496-56E559180480\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2251B20D-F0AA-4FCA-8B62-B3EED16726E3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7D400E92-D0E4-43C2-8ECF-84352B5B2608\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.\"}]",
"id": "CVE-2005-2631",
"lastModified": "2024-11-21T00:00:00.763",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2005-08-23T04:00:00.000",
"references": "[{\"url\": \"http://secunia.com/advisories/16472/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/14585\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/21884\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/16472/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/14585\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/21884\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2005-2631\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2005-08-23T04:00:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D17AF7C3-3453-4343-AC57-B3BAACAD36E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D20F5D1-C28A-4D0E-B4BA-3F8A9B05933E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FA3ABF2-F8D7-4D46-8862-072AD105AE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28B34BF7-B96E-4C6A-B6BD-803680629300\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"280C9607-98C6-44CE-9017-43592EC9D013\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F972C202-DEEB-49AD-BBE7-442CA0E975E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"028ABC18-8944-474C-8482-2DC4F0E0B51B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD764CC4-F985-4A2F-B744-0B07BE59534F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B450984-DF81-46FE-A3E2-16323D1E55A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6133BA76-655F-4023-A5C5-31919D3C45E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A5D9FFC-728E-4E2A-9787-0748D0C88433\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8559F336-5A94-43ED-BF2E-0126038DA3C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7FE412A-DB93-41FC-85B3-38E46913BEB3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63702A32-F7D3-46FF-B7B2-A845081D3AFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF86C8A2-154B-49B3-B263-41826DC196BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CC77562-5C30-4DA3-AFCD-7CD63D85E298\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9CD71A6-724B-42C1-BBBD-456F74393909\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6828C91-18F9-4E36-B496-56E559180480\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2251B20D-F0AA-4FCA-8B62-B3EED16726E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D400E92-D0E4-43C2-8ECF-84352B5B2608\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/16472/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/14585\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/21884\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/16472/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/14585\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/21884\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…