Mac OS X : Cisco AnyConnect Secure Mobility Client 3.0.x / 3.1.x Local Privilege Escalation
High Nessus Plugin ID 70259
SynopsisThe remote host has software installed that is vulnerable to privilege escalation attacks.
DescriptionThe remote host has a version of Cisco AnyConnect 3.0.x or 3.1.x. As such, it is vulnerable to a local privilege escalation attack caused by improper permissions on a library directory. This issue could allow a local attacker to execute arbitrary programs with elevated privileges.
SolutionThe vendor has not released a patch. Consult the workaround provided by the vendor.