CVE-2014-0651 The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hij...
MediumCVSS 4.9
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco context directory agent | All versions | No fix listed |
References
- 101809 vdb-entry
- 56365 third-party-advisory
- 20140107 Cisco Context Directory Agent Privilege Escalation Vulnerability vendor-advisory
- tools.cisco.com vendor-advisory
- 64706 third-party-advisory vdb-entry
- 1029573 third-party-advisory vdb-entry
- cisco-cda-cve20140651-priv-esc(90166) vdb-entry