CVE-2015-6306
No fix known EPSS 1%
Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.
Products: cisco anyconnect_secure_mobility_client