CVE-2011-0951

Related Files

Cisco Security Advisory 20110330-acs

Posted Mar 30, 2011

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - A vulnerability exists in some Cisco Secure Access Control System (ACS) versions that could allow a remote, unauthenticated attacker to change the password of any user account to any value without providing the account's previous password. Successful exploitation requires the user account to be defined on the internal identity store. This vulnerability does not allow an attacker to perform any other changes to the ACS database. That is, an attacker cannot change access policies, device properties, or any account attributes except the user password. Cisco has released free software updates that address this vulnerability. There is no workaround for this vulnerability.

tags | advisory, remote

systems | cisco

advisories | CVE-2011-0951

SHA-256 | 6b27a6d0350503c5eb2d868879d677892bb126cfaeb81bd45854c169f2040d76

Download | Favorite | View