Lucene search
HistoryOct 30, 2015 - 10:59 a.m.
CVE-2015-6348
cisco
secure access control server
acs
solution engine
cve-2015-6348
nvd
remote authentication
rbac restrictions
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.8%
The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and read report or status information, by visiting an unspecified web page.
Affected configurations
Node
ciscosecure_access_control_serverMatch5.7.0.15
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:secure_access_control_server | cisco secure access control server | eq | 5.7.0.15 |
Related
cvelist
cvelist
CVE-2015-6348
2015-10-30 10:00:00
prion
prion
Design/Logic Flaw
2015-10-30 10:59:00
nvd
nvd
CVE-2015-6348
2015-10-30 10:59:06
cisco
cisco
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.8%
Related for CVE-2015-6348