CVE-2014-0649

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.

Weaknesses (CWE)

CWE-264

Affected Products (26)

cisco · secure_access_control_systemvulnerable

cisco · secure_access_control_system

References (14)

http://osvdb.org/102116

http://secunia.com/advisories/56213

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=32378

Vendor Advisory

http://www.securityfocus.com/bid/64958

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029634

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90430

http://osvdb.org/102116