CVE-2024-20337 (GCVE-0-2024-20337)
Vulnerability from cvelistv5
Published
2024-03-06 16:30
Modified
2024-08-01 21:59
Severity ?
8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
CWE
  • CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
Summary
A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed (CRLF) injection attack against a user. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link while establishing a VPN session. A successful exploit could allow the attacker to execute arbitrary script code in the browser or access sensitive, browser-based information, including a valid SAML token. The attacker could then use the token to establish a remote access VPN session with the privileges of the affected user. Individual hosts and services behind the VPN headend would still need additional credentials for successful access.
References
Impacted products
Vendor Product Version
Cisco Cisco Secure Client Version: 4.9.00086
Version: 4.9.01095
Version: 4.9.02028
Version: 4.9.03047
Version: 4.9.03049
Version: 4.9.04043
Version: 4.9.04053
Version: 4.9.05042
Version: 4.9.06037
Version: 4.10.00093
Version: 4.10.01075
Version: 4.10.02086
Version: 4.10.03104
Version: 4.10.04065
Version: 4.10.04071
Version: 4.10.05085
Version: 4.10.05095
Version: 4.10.05111
Version: 4.10.06079
Version: 4.10.06090
Version: 4.10.07061
Version: 4.10.07062
Version: 4.10.07073
Version: 5.0.00238
Version: 5.0.00529
Version: 5.0.00556
Version: 5.0.01242
Version: 5.0.02075
Version: 5.0.03072
Version: 5.0.03076
Version: 5.0.04032
Version: 5.0.05040
Version: 5.1.0.136
Version: 5.1.1.42
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.00086:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.01095:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.02028:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.03047:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.03049:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.04043:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.04053:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.05042:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:4.9.06037:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:*",
              "cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "secure_client",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "4.10.00093"
              },
              {
                "status": "affected",
                "version": "4.10.01075"
              },
              {
                "status": "affected",
                "version": "4.10.02086"
              },
              {
                "status": "affected",
                "version": "4.10.03104"
              },
              {
                "status": "affected",
                "version": "4.10.04065"
              },
              {
                "status": "affected",
                "version": "4.10.04071"
              },
              {
                "status": "affected",
                "version": "4.10.05085"
              },
              {
                "status": "affected",
                "version": "4.10.05095"
              },
              {
                "status": "affected",
                "version": "4.10.05111"
              },
              {
                "status": "affected",
                "version": "4.10.06079"
              },
              {
                "status": "affected",
                "version": "4.10.06090"
              },
              {
                "status": "affected",
                "version": "4.10.07061"
              },
              {
                "status": "affected",
                "version": "4.10.07062"
              },
              {
                "status": "affected",
                "version": "4.10.07073"
              },
              {
                "status": "affected",
                "version": "4.9.00086"
              },
              {
                "status": "affected",
                "version": "4.9.01095"
              },
              {
                "status": "affected",
                "version": "4.9.02028"
              },
              {
                "status": "affected",
                "version": "4.9.03047"
              },
              {
                "status": "affected",
                "version": "4.9.03049"
              },
              {
                "status": "affected",
                "version": "4.9.04043"
              },
              {
                "status": "affected",
                "version": "4.9.04053"
              },
              {
                "status": "affected",
                "version": "4.9.05042"
              },
              {
                "status": "affected",
                "version": "4.9.06037"
              },
              {
                "status": "affected",
                "version": "5.0.00238"
              },
              {
                "status": "affected",
                "version": "5.0.00529"
              },
              {
                "status": "affected",
                "version": "5.0.00556"
              },
              {
                "status": "affected",
                "version": "5.0.01242"
              },
              {
                "status": "affected",
                "version": "5.0.02075"
              },
              {
                "status": "affected",
                "version": "5.0.03072"
              },
              {
                "status": "affected",
                "version": "5.0.03076"
              },
              {
                "status": "affected",
                "version": "5.0.04032"
              },
              {
                "status": "affected",
                "version": "5.1.0.136"
              },
              {
                "status": "affected",
                "version": "5.1.1.42"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20337",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-09T05:00:57.702576Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-25T17:00:36.986Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:42.871Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-secure-client-crlf-W43V4G7",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-client-crlf-W43V4G7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Secure Client",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "4.9.00086"
            },
            {
              "status": "affected",
              "version": "4.9.01095"
            },
            {
              "status": "affected",
              "version": "4.9.02028"
            },
            {
              "status": "affected",
              "version": "4.9.03047"
            },
            {
              "status": "affected",
              "version": "4.9.03049"
            },
            {
              "status": "affected",
              "version": "4.9.04043"
            },
            {
              "status": "affected",
              "version": "4.9.04053"
            },
            {
              "status": "affected",
              "version": "4.9.05042"
            },
            {
              "status": "affected",
              "version": "4.9.06037"
            },
            {
              "status": "affected",
              "version": "4.10.00093"
            },
            {
              "status": "affected",
              "version": "4.10.01075"
            },
            {
              "status": "affected",
              "version": "4.10.02086"
            },
            {
              "status": "affected",
              "version": "4.10.03104"
            },
            {
              "status": "affected",
              "version": "4.10.04065"
            },
            {
              "status": "affected",
              "version": "4.10.04071"
            },
            {
              "status": "affected",
              "version": "4.10.05085"
            },
            {
              "status": "affected",
              "version": "4.10.05095"
            },
            {
              "status": "affected",
              "version": "4.10.05111"
            },
            {
              "status": "affected",
              "version": "4.10.06079"
            },
            {
              "status": "affected",
              "version": "4.10.06090"
            },
            {
              "status": "affected",
              "version": "4.10.07061"
            },
            {
              "status": "affected",
              "version": "4.10.07062"
            },
            {
              "status": "affected",
              "version": "4.10.07073"
            },
            {
              "status": "affected",
              "version": "5.0.00238"
            },
            {
              "status": "affected",
              "version": "5.0.00529"
            },
            {
              "status": "affected",
              "version": "5.0.00556"
            },
            {
              "status": "affected",
              "version": "5.0.01242"
            },
            {
              "status": "affected",
              "version": "5.0.02075"
            },
            {
              "status": "affected",
              "version": "5.0.03072"
            },
            {
              "status": "affected",
              "version": "5.0.03076"
            },
            {
              "status": "affected",
              "version": "5.0.04032"
            },
            {
              "status": "affected",
              "version": "5.0.05040"
            },
            {
              "status": "affected",
              "version": "5.1.0.136"
            },
            {
              "status": "affected",
              "version": "5.1.1.42"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed (CRLF) injection attack against a user. \r\n\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link while establishing a VPN session. A successful exploit could allow the attacker to execute arbitrary script code in the browser or access sensitive, browser-based information, including a valid SAML token. The attacker could then use the token to establish a remote access VPN session with the privileges of the affected user. Individual hosts and services behind the VPN headend would still need additional credentials for successful access."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-93",
              "description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-06T16:30:02.285Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-secure-client-crlf-W43V4G7",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-client-crlf-W43V4G7"
        }
      ],
      "source": {
        "advisory": "cisco-sa-secure-client-crlf-W43V4G7",
        "defects": [
          "CSCwi37512"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20337",
    "datePublished": "2024-03-06T16:30:02.285Z",
    "dateReserved": "2023-11-08T15:08:07.642Z",
    "dateUpdated": "2024-08-01T21:59:42.871Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-client-crlf-W43V4G7\", \"name\": \"cisco-sa-secure-client-crlf-W43V4G7\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T21:59:42.871Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-20337\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-03-09T05:00:57.702576Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.00086:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.01095:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.02028:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.03047:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.03049:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.04043:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.04053:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.05042:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:4.9.06037:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:*\", \"cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:*\"], \"vendor\": \"cisco\", \"product\": \"secure_client\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.10.00093\"}, {\"status\": \"affected\", \"version\": \"4.10.01075\"}, {\"status\": \"affected\", \"version\": \"4.10.02086\"}, {\"status\": \"affected\", \"version\": \"4.10.03104\"}, {\"status\": \"affected\", \"version\": \"4.10.04065\"}, {\"status\": \"affected\", \"version\": \"4.10.04071\"}, {\"status\": \"affected\", \"version\": \"4.10.05085\"}, {\"status\": \"affected\", \"version\": \"4.10.05095\"}, {\"status\": \"affected\", \"version\": \"4.10.05111\"}, {\"status\": \"affected\", \"version\": \"4.10.06079\"}, {\"status\": \"affected\", \"version\": \"4.10.06090\"}, {\"status\": \"affected\", \"version\": \"4.10.07061\"}, {\"status\": \"affected\", \"version\": \"4.10.07062\"}, {\"status\": \"affected\", \"version\": \"4.10.07073\"}, {\"status\": \"affected\", \"version\": \"4.9.00086\"}, {\"status\": \"affected\", \"version\": \"4.9.01095\"}, {\"status\": \"affected\", \"version\": \"4.9.02028\"}, {\"status\": \"affected\", \"version\": \"4.9.03047\"}, {\"status\": \"affected\", \"version\": \"4.9.03049\"}, {\"status\": \"affected\", \"version\": \"4.9.04043\"}, {\"status\": \"affected\", \"version\": \"4.9.04053\"}, {\"status\": \"affected\", \"version\": \"4.9.05042\"}, {\"status\": \"affected\", \"version\": \"4.9.06037\"}, {\"status\": \"affected\", \"version\": \"5.0.00238\"}, {\"status\": \"affected\", \"version\": \"5.0.00529\"}, {\"status\": \"affected\", \"version\": \"5.0.00556\"}, {\"status\": \"affected\", \"version\": \"5.0.01242\"}, {\"status\": \"affected\", \"version\": \"5.0.02075\"}, {\"status\": \"affected\", \"version\": \"5.0.03072\"}, {\"status\": \"affected\", \"version\": \"5.0.03076\"}, {\"status\": \"affected\", \"version\": \"5.0.04032\"}, {\"status\": \"affected\", \"version\": \"5.1.0.136\"}, {\"status\": \"affected\", \"version\": \"5.1.1.42\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-25T17:00:29.573Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwi37512\"], \"advisory\": \"cisco-sa-secure-client-crlf-W43V4G7\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.2, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Client\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.9.00086\"}, {\"status\": \"affected\", \"version\": \"4.9.01095\"}, {\"status\": \"affected\", \"version\": \"4.9.02028\"}, {\"status\": \"affected\", \"version\": \"4.9.03047\"}, {\"status\": \"affected\", \"version\": \"4.9.03049\"}, {\"status\": \"affected\", \"version\": \"4.9.04043\"}, {\"status\": \"affected\", \"version\": \"4.9.04053\"}, {\"status\": \"affected\", \"version\": \"4.9.05042\"}, {\"status\": \"affected\", \"version\": \"4.9.06037\"}, {\"status\": \"affected\", \"version\": \"4.10.00093\"}, {\"status\": \"affected\", \"version\": \"4.10.01075\"}, {\"status\": \"affected\", \"version\": \"4.10.02086\"}, {\"status\": \"affected\", \"version\": \"4.10.03104\"}, {\"status\": \"affected\", \"version\": \"4.10.04065\"}, {\"status\": \"affected\", \"version\": \"4.10.04071\"}, {\"status\": \"affected\", \"version\": \"4.10.05085\"}, {\"status\": \"affected\", \"version\": \"4.10.05095\"}, {\"status\": \"affected\", \"version\": \"4.10.05111\"}, {\"status\": \"affected\", \"version\": \"4.10.06079\"}, {\"status\": \"affected\", \"version\": \"4.10.06090\"}, {\"status\": \"affected\", \"version\": \"4.10.07061\"}, {\"status\": \"affected\", \"version\": \"4.10.07062\"}, {\"status\": \"affected\", \"version\": \"4.10.07073\"}, {\"status\": \"affected\", \"version\": \"5.0.00238\"}, {\"status\": \"affected\", \"version\": \"5.0.00529\"}, {\"status\": \"affected\", \"version\": \"5.0.00556\"}, {\"status\": \"affected\", \"version\": \"5.0.01242\"}, {\"status\": \"affected\", \"version\": \"5.0.02075\"}, {\"status\": \"affected\", \"version\": \"5.0.03072\"}, {\"status\": \"affected\", \"version\": \"5.0.03076\"}, {\"status\": \"affected\", \"version\": \"5.0.04032\"}, {\"status\": \"affected\", \"version\": \"5.0.05040\"}, {\"status\": \"affected\", \"version\": \"5.1.0.136\"}, {\"status\": \"affected\", \"version\": \"5.1.1.42\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-client-crlf-W43V4G7\", \"name\": \"cisco-sa-secure-client-crlf-W43V4G7\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed (CRLF) injection attack against a user. \\r\\n\\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link while establishing a VPN session. A successful exploit could allow the attacker to execute arbitrary script code in the browser or access sensitive, browser-based information, including a valid SAML token. The attacker could then use the token to establish a remote access VPN session with the privileges of the affected user. Individual hosts and services behind the VPN headend would still need additional credentials for successful access.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-93\", \"description\": \"Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2024-03-06T16:30:02.285Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-20337\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-08-01T21:59:42.871Z\", \"dateReserved\": \"2023-11-08T15:08:07.642Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2024-03-06T16:30:02.285Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.