CVE-2014-0667 in Cisco Secure Access Control System

Summary

The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

01/02/2014

Disclosure

01/16/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
12330	Cisco Secure Access Control System RMI Arbitrary File Read access control	264	Unproven	Official fix	CVE-2014-0667
11990	Cisco Secure Access Control System Remote Method Invocation access control	264	Unproven	Official fix	CVE-2014-0667

Sources

• MITRE
• NVD
• CVE Details