CVE-2014-0648

Cisco Secure Access Control System < 5.5 - Unauthenticated Remote Administrative Access via RMI Interface

Title source: llm
STIX 2.1

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/64962
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/56213
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/90431
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102117
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029634

Scores

EPSS 0.0593
EPSS Percentile 92.5%

Details

CWE
CWE-264
Status published
Products (26)
cisco/secure_access_control_system 5.1
cisco/secure_access_control_system 5.1.0.44
cisco/secure_access_control_system 5.1.0.44.1
cisco/secure_access_control_system 5.1.0.44.2
cisco/secure_access_control_system 5.1.0.44.3
cisco/secure_access_control_system 5.1.0.44.4
cisco/secure_access_control_system 5.1.0.44.5
cisco/secure_access_control_system 5.2
cisco/secure_access_control_system 5.2.0.26
cisco/secure_access_control_system 5.2.0.26.1
... and 16 more
Published Jan 16, 2014
Tracked Since Feb 18, 2026