CVE-2014-8027: Medium severity cisco secure access control server vulnerability
The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8027?
CVE-2014-8027 is rated as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2014-8027?
To remediate CVE-2014-8027, update the Cisco Secure Access Control System to the latest version as recommended by Cisco.
Who is affected by CVE-2014-8027?
CVE-2014-8027 affects users of Cisco Secure Access Control System who have remote authenticated access.
What type of attack does CVE-2014-8027 facilitate?
CVE-2014-8027 facilitates privilege escalation attacks allowing unauthorized operations on network devices.
Can CVE-2014-8027 be exploited remotely?
Yes, CVE-2014-8027 can be exploited remotely by authenticated users through crafted HTTP requests.