CVE-2014-0649

Cisco Secure Access Control System < 5.5 - Authenticated Privilege Escalation via RMI Interface

Title source: llm

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.

References (7)

Core 7

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/56213

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32378

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029634

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/102116

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/64958

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/90430

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs

Scores

EPSS 0.0265

EPSS Percentile 84.0%

Details

CWE

CWE-264

Status published

Products (26)

cisco/secure_access_control_system 5.1

cisco/secure_access_control_system 5.1.0.44

cisco/secure_access_control_system 5.1.0.44.1

cisco/secure_access_control_system 5.1.0.44.2

cisco/secure_access_control_system 5.1.0.44.3

cisco/secure_access_control_system 5.1.0.44.4

cisco/secure_access_control_system 5.1.0.44.5

cisco/secure_access_control_system 5.2

cisco/secure_access_control_system 5.2.0.26

cisco/secure_access_control_system 5.2.0.26.1

... and 16 more

Published Jan 16, 2014

Tracked Since Feb 18, 2026