CVE-2007-0058

critical

Description

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

References

Advisories
More

http://www.vupen.com/english/advisories/2007/0030

http://securitytracker.com/id?1017465

http://secunia.com/advisories/23556

http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml

Details

Source: Mitre, NVD

Published: 2007-01-04

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01