CVE-2005-2631: Cisco Network Admission Control Manager And Server System Software

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

Affected products

• Cisco Network Admission Control Manager And Server System Software: version 3.3 only; version 3.3.1 only; version 3.3.2 only; version 3.3.3 only; version 3.3.4 only; version 3.3.5 only; …

Published 2005-08-23. Last modified 2026-06-16.