CVE-2014-0649

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/90430

http://www.securitytracker.com/id/1029634

http://www.securityfocus.com/bid/64958

http://tools.cisco.com/security/center/viewAlert.x?alertId=32378

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs

http://secunia.com/advisories/56213

http://osvdb.org/102116

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3