6.3 Medium
AI Score
Confidence
Low
9 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
73.7%
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.
osvdb.org/102116
secunia.com/advisories/56213
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs
tools.cisco.com/security/center/viewAlert.x?alertId=32378
www.securityfocus.com/bid/64958
www.securitytracker.com/id/1029634
exchange.xforce.ibmcloud.com/vulnerabilities/90430