critical10.0
CVE-2014-0648
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which all…
Impact
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Secure Access Control System | through 5.4.0.46.6 Versions 5.1, 5.1.0.44, 5.1.0.44.1, 5.1.0.44.2, 5.1.0.44.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/102117
- http://secunia.com/advisories/56213
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32379
- http://www.securityfocus.com/bid/64962
- http://www.securitytracker.com/id/1029634
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90431
- http://osvdb.org/102117
- http://secunia.com/advisories/56213
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32379
- http://www.securityfocus.com/bid/64962
- http://www.securitytracker.com/id/1029634
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90431