CVE-2014-0648

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.

Weaknesses (CWE)

CWE-264

Affected Products (26)

cisco · secure_access_control_systemvulnerable

cisco · secure_access_control_system

References (14)

http://osvdb.org/102117

http://secunia.com/advisories/56213

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=32379

Vendor Advisory

http://www.securityfocus.com/bid/64962

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029634

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90431

http://osvdb.org/102117