Cisco Secure Access Control System privilege escalation
Published:		31.03.2011
Source:		BUGTRAQ
SecurityVulns ID:		11549
Type:		local
Level:		5/10
Description:		It's possible to reset any user's password.

CVE:

CVE-2011-0951 (The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.)

Original document

CISCO, Cisco Security Advisory: Cisco Secure Access Control System Unauthorized Password Change Vulnerability (31.03.2011)

Discuss:

Read or add your comments to this news (0 comments)