critical9.0
CVE-2014-0649
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenti…
Impact
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Secure Access Control System | through 5.4.0.46.6 Versions 5.1, 5.1.0.44, 5.1.0.44.1, 5.1.0.44.2, 5.1.0.44.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/102116
- http://secunia.com/advisories/56213
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32378
- http://www.securityfocus.com/bid/64958
- http://www.securitytracker.com/id/1029634
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90430
- http://osvdb.org/102116
- http://secunia.com/advisories/56213
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32378
- http://www.securityfocus.com/bid/64958
- http://www.securitytracker.com/id/1029634
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90430