A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0691
Reference (s):
- CISCO:20150415 Cisco Secure Desktop Cache Cleaner Command Execution Vulnerability
- URL: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150415-csd
- SECTRACK:1032140
- URL: http://www.securitytracker.com/id/1032140