CVEvulnerability
CVE-2014-8027
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034.
Affected configurations
• cisco secure access control system
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/62159 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8027 Vendor Advisory
- http://www.securityfocus.com/bid/71944 www.securityfocus.com
- http://www.securitytracker.com/id/1031516 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100558 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/62159 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8027 Vendor Advisory
- http://www.securityfocus.com/bid/71944 www.securityfocus.com
- http://www.securitytracker.com/id/1031516 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100558 exchange.xforce.ibmcloud.com