CVE-2014-0651

Cisco Context Directory Agent (CDA) is affected by CVE-2014-0651 due to insufficient authorization enforcement in the administrative interface. An authenticated, remote attacker can hijack an active session to perform administrative actions, effectively gaining privileges. The advisory notes expl...