CVE-2014-0678

Cisco Secure Access Control System - Authenticated Session Hijacking and Privilege Escalation

Title source: llm

Description

The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951.

References (7)

Core 7

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/56540

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/65144

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32567

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029688

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/90732

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0678

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/102558

Scores

EPSS 0.0143

EPSS Percentile 70.2%

Details

CWE

CWE-264

Status published

Products (1)

cisco/secure_access_control_system

Published Jan 25, 2014

Tracked Since Feb 18, 2026