Cisco Secure Access Control System RMI Interface Authorization Bypass Vulnerability

Bugtraq ID:	64983
Class:	Access Validation Error
CVE:	CVE-2014-0667
Remote:	Yes
Local:	No
Published:	Jan 16 2014 12:00AM
Updated:	Jan 20 2014 08:23AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Secure Access Control System RMI Interface Authorization Bypass Vulnerability

The Cisco Secure Access Control System is prone to an authorization-bypass vulnerability because of insufficient authorization enforcement.

A remote attacker can exploit this issue to read arbitrary files in affected devices.

This issue is tracked by Cisco Bug ID CSCud75169.

Cisco Secure Access Control System RMI Interface Authorization Bypass Vulnerability

Attackers can exploit this issue via a web client.

Cisco Secure Access Control System RMI Interface Authorization Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Secure Access Control System RMI Interface Authorization Bypass Vulnerability

References:

• Cisco Secure Access Control Server Homepage (Cisco )