Cisco Security Advisory: Cisco Clean Access (CCA) is a software solution that can automatically detect, isolate, and clean infected or vulnerable devices that attempt to access your network. CCA includes as part of the architecture an Application Program Interface (API). Lack of authentication while invoking API methods can allow an attacker to bypass security posture checking, change the assigned role for a user, disconnect users and can also lead to information disclosure on configured users. Versions affected: CCA releases 3.3.0 to 3.3.9, CCA releases 3.4.0 to 3.4.5, CCA releases 3.5.0 to 3.5.3.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39456/cisco-sa-20050817-cca.txt
Source: https://packetstormsecurity.com/files/39456/Cisco-Security-Advisory-20050817-cca.html