Unscored CVE-2015-6347 EUVD-2015-6289GHSA-3j82-49jr-frq8

The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restric…

Published Oct 30, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page.

References

20151026 Cisco Secure Access Control Server Role-Based Access Control URL Lack of Protection Vulnerability vendor-advisory
1033971 vdb-entry