NVD

Id
29533  
Name
CVE-2014-0649  
Description
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-01-16  
Modified Date
2016-09-16  
Seq
2014-0649  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156488 29533 CVE-2014-0649 20140115 Multiple Vulnerabilities in Cisco Secure Access Control System  View
156489 29533 CVE-2014-0649 http://tools.cisco.com/security/center/viewAlert.x?alertId=32378  View
156490 29533 CVE-2014-0649 64958  View
156491 29533 CVE-2014-0649 1029634  View
156492 29533 CVE-2014-0649 cisco-acs-cve20140649-priv-esc(90430)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12315 JVNDB-2014-001190 Cisco Secure Access Control System の RMI インターフェースにおける superadmin のアクセス権を取得される脆弱性 Cisco Secure Access Control System (ACS) の RMI インターフェースは、認可の要求を適切に処理しないため、superadmin のアクセス権を取得される脆弱性が存在します。 CVE-2014-0649 68050 CVE-2014-0649 29533 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001190.html 2014-01-15 2014-01-20 View