Unscored CVE-2012-5424 EUVD-2012-5343GHSA-m5mg-489p-j2jg

Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+…

Published Nov 7, 2012 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, which allows remote attackers to bypass authentication by sending a valid username and a crafted password string, aka Bug ID CSCuc65634.

References

20121107 Cisco Secure Access Control System TACACS+ Authentication Bypass Vulnerability vendor-advisory
87251 vdb-entry
cisco-acs-sec-bypass(79860) vdb-entry
56433 vdb-entry
51194 third-party-advisory
1027733 vdb-entry