Lucene search
HistoryJan 16, 2014 - 7:55 p.m.
CVE-2014-0667
cisco
secure access control system
acs
rmi interface
authorization requirements
remote authenticated users
arbitrary files
cve-2014-0667
bug id cscud75169
nvd
6.3 Medium
AI Score
Confidence
Low
6.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
64.6%
The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:secure_access_control_system | cisco secure access control system | eq | - |
Related
nessus
nessus
Cisco Secure ACS RMI Arbitrary File Read (CSCud75169)
2014-01-27 00:00:00
prion
prion
Design/Logic Flaw
2014-01-16 19:55:00
cvelist
cvelist
CVE-2014-0667
2014-01-16 19:00:00
cisco
cisco
Cisco Secure ACS RMI Arbitrary File Read Vulnerability
2014-01-16 19:18:55
6.3 Medium
AI Score
Confidence
Low
6.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
64.6%
Related for CVE-2014-0667