CVE-2006-3226

CVE Database · CVE-2006-3226

CVE-2006-3226

· N/AModified

CVSS v3.1

N/A

EPSS

2.34%

Published

Jun 26, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."

Affected Products (2)

cisco · secure_access_control_servervulnerable

References (20)

http://secunia.com/advisories/20816

http://securityreason.com/securityalert/1157

http://securitytracker.com/id?1016369

http://www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html

Vendor Advisory

http://www.osvdb.org/26825

http://www.securityfocus.com/archive/1/438161/100/0/threaded

http://www.securityfocus.com/archive/1/438258/100/0/threaded

http://www.securityfocus.com/bid/18621

http://www.vupen.com/english/advisories/2006/2524

https://exchange.xforce.ibmcloud.com/vulnerabilities/27328

http://secunia.com/advisories/20816

KEV Catalog EPSS Scores Vendors All CVEs