VulnerabilityModified
CVE-2014-0678
The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951.
MEDIUM 5.5EPSS 1.43%
Does this matter?
Lower severity and a low EPSS score (1.43%). Track it; it rarely justifies an emergency change on its own.
Description
The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951.
- CVSS 2.0
- 5.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
- EPSS
- 1.43% probability · 71th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/secure access control system
- Source
- psirt@cisco.com
References
- http://osvdb.org/102558
- http://secunia.com/advisories/56540
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0678Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32567Vendor Advisory
- http://www.securityfocus.com/bid/65144Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029688Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90732
- http://osvdb.org/102558
- http://secunia.com/advisories/56540
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0678Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32567Vendor Advisory
- http://www.securityfocus.com/bid/65144Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029688Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90732
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.