CVE-2014-0649

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.

• cisco secure access control system (<= 5.4.0.46.6) • cisco secure access control system 5.1 • cisco secure access control system 5.1.0.44 • cisco secure access control system 5.1.0.44.1 • cisco secure access control system 5.1.0.44.2 • cisco secure access control system 5.1.0.44.3 • cisco secure access control system 5.1.0.44.4 • cisco secure access control system 5.1.0.44.5 • cisco secure access control system 5.2 • cisco secure access control system 5.2.0.26 • cisco secure access control system 5.2.0.26.1 • cisco secure access control system 5.2.0.26.2 • cisco secure access control system 5.3.0.40.1 • cisco secure access control system 5.3.0.40.2 • cisco secure access control system 5.3.0.40.3 • cisco secure access control system 5.3.0.40.4 • cisco secure access control system 5.3.0.40.5 • cisco secure access control system 5.3.0.40.6 • cisco secure access control system 5.3.0.40.7 • cisco secure access control system 5.3.0.40.8 • cisco secure access control system 5.3.0.40.9 • cisco secure access control system 5.4.0.46.1 • cisco secure access control system 5.4.0.46.2 • cisco secure access control system 5.4.0.46.3 • cisco secure access control system 5.4.0.46.4 • cisco secure access control system 5.4.0.46.5