CVE-2014-0651

Currently unrated

Key Information:

Vendor
Cisco
Status
Context Directory Agent
Vendor
CVE Published:
8 January 2014

Summary

The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.

References

http://osvdb.org/101809
vdb-entryx_refsource_OSVDB
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM
http://secunia.com/advisories/56365
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.