Cisco AnyConnect Secure Mobility Client for Android Service Hijack Vulnerability

A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an unauthenticated, local attacker to perform a service hijack attack on an affected device or cause a denial of service (DoS) condition. The vulnerability is due to the use of implicit service invocations. An attacker could exploit this vulnerability by persuading a user to install a malicious application. A successful exploit could allow the attacker to access confidential user information or cause a DoS condition on the AnyConnect application.

N/A

对数据真实性的验证不充分

Cisco AnyConnect Secure Mobility Client for Android 数据伪造问题漏洞

Cisco AnyConnect Secure Mobility Client for Android是美国思科（Cisco）公司的一款基于Android平台的可通过任何设备安全访问网络和应用的安全移动客户端。 Cisco AnyConnect Secure Mobility Client for Android Release 4.8.00826之前版本中的服务之间通讯存在数据伪造问题漏洞。本地攻击者可通过诱使用户安装恶意的应用程序利用该漏洞访问敏感的用户信息或造成拒绝服务。

N/A

N/A