Authentication Bypass Vulnerability in Cisco Secure Access Control System
CVE-2012-5424

Currently unrated

Key Information:

Vendor
Cisco
Status
Secure Access Control Server
Vendor
CVE Published:
7 November 2012

Summary

An authentication bypass vulnerability exists in Cisco Secure Access Control System due to improper password validation when using specific configurations involving TACACS+ and LDAP. This flaw allows remote attackers to gain unauthorized access by providing a valid username along with a specially crafted password string. Organizations using affected versions of Cisco ACS are urged to apply the necessary patches to mitigate this security risk.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://osvdb.org/87251
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/79860
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.