CVE-2014-8029 Open redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspec...
MediumCVSS 5.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCuq74150.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control system | All versions | No fix listed |
References
- 62159 third-party-advisory
- 20150108 Cisco Secure Access Control Server Open Redirect Vulnerability vendor-advisory
- 71948 vdb-entry
- 1031514 vdb-entry
- cisco-secureacs-cve20148029-open-redirect(100548) vdb-entry