CVE-2015-6348: Medium severity cisco secure access control server vulnerability
The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and read report or status information, by visiting an unspecified web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6348?
CVE-2015-6348 has a high severity rating due to the potential for unauthorized access to sensitive report information.
How do I fix CVE-2015-6348?
To fix CVE-2015-6348, upgrade Cisco Secure Access Control Server to version 5.7(0.16) or later, which addresses the RBAC bypass.
Who is affected by CVE-2015-6348?
CVE-2015-6348 affects users of Cisco Secure Access Control Server version 5.7(0.15) and earlier.
What are the implications of exploiting CVE-2015-6348?
Exploiting CVE-2015-6348 allows authenticated users to bypass RBAC restrictions and access sensitive reports.
Is there a workaround for CVE-2015-6348?
There is no documented workaround for CVE-2015-6348; upgrading to a patched version is the recommended approach.