Unscored CVE-2014-0648 EUVD-2014-0679GHSA-r5wc-p8jh-hvf4

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization req…

Published Jan 16, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.

References

64962 vdb-entry
56213 third-party-advisory
cisco-acs-cve20140648-unauth-access(90431) vdb-entry
102117 vdb-entry
1029634 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=32379
20140115 Multiple Vulnerabilities in Cisco Secure Access Control System vendor-advisory