Description
The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169.
References
- 1029641 vdb-entry
- 64983 vdb-entry
- 102168 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32468
- 20140116 Cisco Secure ACS RMI Arbitrary File Read Vulnerability vendor-advisory
- cisco-acs-cve20140667-info-disc(90497) vdb-entry