CVEvulnerability
CVE-2015-6348
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-10-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and read report or status information, by visiting an unspecified web page.
Affected configurations
• cisco secure access control server 5.7.0.15
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_rbac1 Vendor Advisory
- http://www.securitytracker.com/id/1033970 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_rbac1 Vendor Advisory
- http://www.securitytracker.com/id/1033970 www.securitytracker.com