Cisco Secure Access Control Server CVE-2014-8029 Open Redirection Vulnerability

Bugtraq ID:	71948
Class:	Input Validation Error
CVE:	CVE-2014-8029
Remote:	Yes
Local:	No
Published:	Jan 08 2015 12:00AM
Updated:	Jan 15 2015 12:01AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Secure Access Control Server CVE-2014-8029 Open Redirection Vulnerability

Cisco Secure Access Control Server is prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.

An attacker can leverage this issue to conduct phishing attacks; other attacks are possible.

This issue is being tracked by Cisco Bug ID CSCuq74150.

Cisco Secure Access Control Server CVE-2014-8029 Open Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Cisco Secure Access Control Server CVE-2014-8029 Open Redirection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Secure Access Control Server CVE-2014-8029 Open Redirection Vulnerability

References:

• Cisco Homepage (Cisco )