Description: llhansen has reported a security issue in CCA (Cisco Clean Access), which can be exploited by malicious people to bypass certain security restrictions.
The security issue is caused due to the CCA Server relying on the "User-Agent" string sent by the user's browser to determine whether to install the CCA Agent. This can be bypassed by sending a fake "User-Agent" string.
Successful exploitation allows a Windows system to bypass host-based checks.
The security issue has been reported in versions 3.5.3.1 and 3.5.4.
Solution: See the vendor's advisory for recommended solutions.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
