Login Request a demo
Unscored severity · published Jan 8, 2014
CVE-2014-0651
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CD
Context Directory Agent · Cisco
All versions, or not specified · source: NVD
Affected product
CD
Context Directory Agent
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0651
osvdb.org
http://osvdb.org/101809
secunia.com
http://secunia.com/advisories/56365
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0651
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32364
Third Party Advisory
http://www.securityfocus.com/bid/64706
Third Party Advisory
http://www.securitytracker.com/id/1029573
More from Context Directory Agent
–
CVE-2014-0656
Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353
–
CVE-2014-0654
Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383
–
CVE-2014-0652
Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbitrary web script or HTML via a crafted…
–
CVE-2013-1196
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime…
–
CVE-2013-1125
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution…