CVE-2014-0649

Published: Jan 16, 2014Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.

Affected (26)

Products: Cisco: Secure Access Control System

Cisco

1 product

Secure Access Control System

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Cisco Secure Access Control System	Up to 5.4.0.46.6
Cisco Secure Access Control System	Version 5.1.0.44.1
Cisco Secure Access Control System	Version 5.1.0.44.2
Cisco Secure Access Control System	Version 5.1.0.44.3
Cisco Secure Access Control System	Version 5.1.0.44.4
Cisco Secure Access Control System	Version 5.1.0.44.5
Cisco Secure Access Control System	Version 5.1.0.44
Cisco Secure Access Control System	Version 5.1
Cisco Secure Access Control System	Version 5.2.0.26.1
Cisco Secure Access Control System	Version 5.2.0.26.2
Cisco Secure Access Control System	Version 5.2.0.26
Cisco Secure Access Control System	Version 5.2
Cisco Secure Access Control System	Version 5.3.0.40.1
Cisco Secure Access Control System	Version 5.3.0.40.2
Cisco Secure Access Control System	Version 5.3.0.40.3
Cisco Secure Access Control System	Version 5.3.0.40.4
Cisco Secure Access Control System	Version 5.3.0.40.5
Cisco Secure Access Control System	Version 5.3.0.40.6
Cisco Secure Access Control System	Version 5.3.0.40.7
Cisco Secure Access Control System	Version 5.3.0.40.8
Cisco Secure Access Control System	Version 5.3.0.40.9
Cisco Secure Access Control System	Version 5.4.0.46.1
Cisco Secure Access Control System	Version 5.4.0.46.2
Cisco Secure Access Control System	Version 5.4.0.46.3
Cisco Secure Access Control System	Version 5.4.0.46.4
Cisco Secure Access Control System	Version 5.4.0.46.5