imPC@ndo IT

Tracker / CVE-2014-0648

CVE-2014-0648

High 10.0

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.

Affected products and versions

cisco secure_access_control_system
cisco secure_access_control_system · … → 5.4.0.46.6

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References