CVE-2014-0651: Medium severity Cisco Context Directory Agent vulnerability
Published Jan 8, 2014
·Updated
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.
Affected Software
1 affected component
Cisco Context Directory Agent
Event History
Jan 8, 2014
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0651?
CVE-2014-0651 has a medium severity rating due to the risk of unauthorized administrative access.
2
How do I fix CVE-2014-0651?
To fix CVE-2014-0651, ensure you apply the latest patches provided by Cisco for the Context Directory Agent software.
3
Who is affected by CVE-2014-0651?
CVE-2014-0651 affects Cisco Context Directory Agent users who use the administrative interface.
4
What type of vulnerability is CVE-2014-0651?
CVE-2014-0651 is an authorization bypass vulnerability that allows session hijacking.
5
Can CVE-2014-0651 be exploited remotely?
Yes, CVE-2014-0651 can be exploited remotely by authorized users to gain administrative access.