Lucene search
HistoryJan 09, 2015 - 2:59 a.m.
CVE-2014-8027
cisco
acs
rbac
network device administrator
http requests
bug id cscuq79034
cve-2014-8027
6.4 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
66.2%
The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034.
Affected configurations
Node
ciscosecure_access_control_systemMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:secure_access_control_system | cisco secure access control system | eq | - |
Related
nvd
nvd
CVE-2014-8027
2015-01-09 02:59:03
cvelist
cvelist
CVE-2014-8027
2015-01-09 02:00:00
prion
prion
Design/Logic Flaw
2015-01-09 02:59:00
cisco
cisco
Cisco Secure Access Control Server Privilege Escalation Vulnerability
2015-01-15 23:05:50
6.4 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
66.2%
Related for CVE-2014-8027