cisco secure access control system 5.2.0.26 vulnerabilities and exploits

(subscribe to this query)

The RMI interface in Cisco Secure Access Control System (ACS) 5.x prior to 5.5 does not properly enforce authentication and authorization requirements, which allows remote malicious users to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.

Cisco Secure Access Control System 5.4.0.46.5 Cisco Secure Access Control System Cisco Secure Access Control System 5.3.0.40.8 Cisco Secure Access Control System 5.3.0.40.9 Cisco Secure Access Control System 5.1.0.44.5 Cisco Secure Access Control System 5.2 Cisco Secure Access Control System 5.4.0.46.1 Cisco Secure Access Control System 5.4.0.46.2 Cisco Secure Access Control System 5.3.0.40.4 Cisco Secure Access Control System 5.3.0.40.5 Cisco Secure Access Control System 5.1.0.44.1 Cisco Secure Access Control System 5.1.0.44.2 Cisco Secure Access Control System 5.2.0.26.2 Cisco Secure Access Control System 5.4.0.46.3 Cisco Secure Access Control System 5.4.0.46.4 Cisco Secure Access Control System 5.3.0.40.6 Cisco Secure Access Control System 5.3.0.40.7 Cisco Secure Access Control System 5.1.0.44.3 Cisco Secure Access Control System 5.1.0.44.4 Cisco Secure Access Control System 5.3.0.40.1 Cisco Secure Access Control System 5.3.0.40.2 Cisco Secure Access Control System 5.3.0.40.3

The RMI interface in Cisco Secure Access Control System (ACS) 5.x prior to 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.

Cisco Secure Access Control System 5.4.0.46.3 Cisco Secure Access Control System 5.4.0.46.4 Cisco Secure Access Control System 5.4.0.46.5 Cisco Secure Access Control System 5.3.0.40.6 Cisco Secure Access Control System 5.3.0.40.2 Cisco Secure Access Control System 5.3.0.40.3 Cisco Secure Access Control System 5.1 Cisco Secure Access Control System 5.1.0.44 Cisco Secure Access Control System 5.2.0.26 Cisco Secure Access Control System 5.2.0.26.1 Cisco Secure Access Control System 5.3.0.40.7 Cisco Secure Access Control System 5.1.0.44.3 Cisco Secure Access Control System 5.1.0.44.4 Cisco Secure Access Control System 5.4.0.46.1 Cisco Secure Access Control System 5.4.0.46.2 Cisco Secure Access Control System 5.3.0.40.4 Cisco Secure Access Control System 5.3.0.40.5 Cisco Secure Access Control System 5.1.0.44.1 Cisco Secure Access Control System 5.1.0.44.2 Cisco Secure Access Control System 5.2.0.26.2 Cisco Secure Access Control System Cisco Secure Access Control System 5.3.0.40.1

1 Article

The web interface in Cisco Secure Access Control System (ACS) 5.x prior to 5.4 Patch 3 allows remote malicious users to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.

Cisco Secure Access Control System 5.3.0.40.4 Cisco Secure Access Control System 5.3.0.40.5 Cisco Secure Access Control System 5.1.0.44.1 Cisco Secure Access Control System 5.1.0.44.2 Cisco Secure Access Control System 5.2.0.26.2 Cisco Secure Access Control System Cisco Secure Access Control System 5.3.0.40.1 Cisco Secure Access Control System 5.3.0.40.8 Cisco Secure Access Control System 5.3.0.40.9 Cisco Secure Access Control System 5.1.0.44.5 Cisco Secure Access Control System 5.2 Cisco Secure Access Control System 5.4.0.46.1 Cisco Secure Access Control System 5.3.0.40.6 Cisco Secure Access Control System 5.3.0.40.7 Cisco Secure Access Control System 5.1.0.44.3 Cisco Secure Access Control System 5.1.0.44.4 Cisco Secure Access Control System 5.3.0.40.2 Cisco Secure Access Control System 5.3.0.40.3 Cisco Secure Access Control System 5.1 Cisco Secure Access Control System 5.1.0.44 Cisco Secure Access Control System 5.2.0.26 Cisco Secure Access Control System 5.2.0.26.1

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 prior to 5.1.0.44.6 and 5.2 prior to 5.2.0.26.3 allows remote malicious users to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

Cisco Secure Access Control System 5.1.0.44.1 Cisco Secure Access Control System 5.1.0.44.2 Cisco Secure Access Control System 5.2.0.26.2 Cisco Secure Access Control System 5.1.0.44.3 Cisco Secure Access Control System 5.1.0.44.4 Cisco Secure Access Control System 5.1 Cisco Secure Access Control System 5.1.0.44 Cisco Secure Access Control System 5.2.0.26 Cisco Secure Access Control System 5.2.0.26.1 Cisco Secure Access Control System 5.1.0.44.5 Cisco Secure Access Control System 5.2

Cisco Secure Access Control System (ACS) 5.x prior to 5.2 Patch 11 and 5.3 prior to 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, which allows remote malicious users to bypass authentication by sending a valid ...

Cisco Secure Access Control Server 5.1 Cisco Secure Access Control Server 5.2 Cisco Secure Access Control Server 5.0 Cisco Secure Access Control Server 5.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook