Description (CNA)
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/56213
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32378
- http://www.securitytracker.com/id/1029634
- http://osvdb.org/102116
- http://www.securityfocus.com/bid/64958
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90430
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
ADP enrichment
No English description supplied.
- http://secunia.com/advisories/56213
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32378
- http://www.securitytracker.com/id/1029634
- http://osvdb.org/102116
- http://www.securityfocus.com/bid/64958
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90430
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs