Cisco warns of a flaw in their Cisco Clean Access software

Cisco warns of a flaw in their Cisco Clean Access software

Networking hardware maker Cisco has notified their customers about two serious vulnerabilities in its Cisco Clean Access software.

These two issues are bad enough to allow remote attackers to gain control of the devices, or glean sensitive data from Clean Access customers.

This data could be further used to compromise the Clean Access Manager (CAM) product as per company sources.

The company has released the Security Advisory 72379 related to these bugs. It talks about a problem with initial setup of the Cisco Clean Access Manager (CAM) and Clean Access Server (CAS) product makes it impossible to properly configure a “shared secret” that is used to authentication communications between the two devices.

Cisco further said that the second problem could allow malicious users to view backups of the CAM database without first authenticating on the CAM device.