CVE-2014-8027

The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034.

Score

CVSS 2.0 6.5 Medium

Status

Modified - psirt@cisco.com

Published

2015-01-09

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Secure Access Control System (Cisco)

References

• http://secunia.com/advisories/62159
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8027
• http://www.securityfocus.com/bid/71944
• http://www.securitytracker.com/id/1031516
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100558