CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.6
CWE Name:  Improper Input Validation
Summary: the cisco security service in cisco anyconnect secure mobility client (aka anyconnect vpn client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka bug id cscud14153.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-04-11
Last Modified Date: 2013-04-11