CVE-2014-8027

Description

The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/100558

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-7876

http://www.securitytracker.com/id/1031516

http://www.securityfocus.com/bid/71944

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8027

http://secunia.com/advisories/62159

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS