Description
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.
References
- 101809 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32364
- 56365 third-party-advisory
- 1029573 vdb-entry
- 20140107 Cisco Context Directory Agent Privilege Escalation Vulnerability vendor-advisory
- cisco-cda-cve20140651-priv-esc(90166) vdb-entry
- 64706 vdb-entry