CVE-2014-0678

Currently unrated

Key Information:

Vendor
Cisco
Status
Secure Access Control System
Vendor
CVE Published:
25 January 2014

Summary

The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951.

References

http://secunia.com/advisories/56540
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/65144
vdb-entryx_refsource_BID
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.