Beveiligingsadvies

CVE-2004-1461

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-02-13 05:00:00

Laatst bijgewerkt 2024-08-08 00:53:23

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.

← Alle CVE's bekijken Bekijk op cve.org ↗