Cisco Secure ACS Authentication Bypass Vulnerability

Bugtraq ID:	18621
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 23 2006 12:00AM
Updated:	Jun 26 2006 04:50AM
Credit:	Darren Bounds <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Cisco Secure Access Control Server 4.0.1 Cisco Secure Access Control Server 4.0
Not Vulnerable:

Cisco Secure ACS Authentication Bypass Vulnerability

Cisco Secure ACS is prone to an authentication-bypass vulnerability. This issue is due to the application's failure to properly ensure that remote web-based users are properly authenticated.

This issue allows remote attackers to gain administrative access to the web-based administrative interface of the affected application.

Cisco Secure ACS for Windows versions in the 4.x series were identified as vulnerable to this issue; other versions and platforms may also be affected.

This issue is being tracked by Cisco Bug IDs CSCse26754 and CSCse26719.

Cisco Secure ACS Authentication Bypass Vulnerability

This issue can be exploited through a web client.

Cisco Secure ACS Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

Cisco Secure ACS Authentication Bypass Vulnerability

References:

• Cisco Secure Access Control Server for Windows (Cisco)
  
• Cisco Security Response: Cisco Secure ACS Weak Session Management Vulnerability (Cisco)
  
• Cisco Secure ACS Weak Session Management Vulnerability ("Darren Bounds" )
  
• Re: Cisco Secure ACS Weak Session Management Vulnerability (Clayton Kossmeyer )