VulnerabilityModified
CVE-2014-0651
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.
MEDIUM 4.9EPSS 1.76%
Does this matter?
Lower severity and a low EPSS score (1.76%). Track it; it rarely justifies an emergency change on its own.
Description
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.
- CVSS 2.0
- 4.9 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N
- EPSS
- 1.76% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/context directory agent
- Source
- psirt@cisco.com
References
- http://osvdb.org/101809
- http://secunia.com/advisories/56365
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0651Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32364Vendor Advisory
- http://www.securityfocus.com/bid/64706Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029573Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90166
- http://osvdb.org/101809
- http://secunia.com/advisories/56365
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0651Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32364Vendor Advisory
- http://www.securityfocus.com/bid/64706Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029573Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90166
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.