CVEvulnerability
CVE-2014-0678
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951.
Affected configurations
• cisco secure access control system
Related
Weakness · not in database (1)
References
- http://osvdb.org/102558 osvdb.org
- http://secunia.com/advisories/56540 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0678 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32567 Vendor Advisory
- http://www.securityfocus.com/bid/65144 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029688 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90732 exchange.xforce.ibmcloud.com
- http://osvdb.org/102558 osvdb.org
- http://secunia.com/advisories/56540 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0678 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32567 Vendor Advisory
- http://www.securityfocus.com/bid/65144 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029688 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90732 exchange.xforce.ibmcloud.com