Description
The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:N/I:P/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/43924Vendor Advisory
- http://securitytracker.com/id?1025271
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtmlVendor Advisory
- http://www.securityfocus.com/bid/47093
- http://www.vupen.com/english/advisories/2011/0821Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66471
- http://secunia.com/advisories/43924Vendor Advisory
- http://securitytracker.com/id?1025271
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtmlVendor Advisory
- http://www.securityfocus.com/bid/47093
- http://www.vupen.com/english/advisories/2011/0821Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66471
Timeline
- Published
- Apr 4, 2011
- Last modified
- Jun 16, 2026
- NVD status
- Modified