Authentication Bypass in Cisco Secure ACS Through Cisco Trust Agent

CVE-2007-1800

Summary

The Cisco Secure ACS platform is vulnerable to an authentication bypass issue when the Cisco Trust Agent (CTA) transmits posture information. This flaw may enable remote attackers to gain unauthorized network access by presenting a spoofed Network Endpoint Assessment posture, commonly referred to as 'NACATTACK.' Although the exploit is primarily limited to authenticated users and devices within the network, its implications could lead to significant security risks, allowing malicious entities to circumvent intended access controls.

References