Lucene search

K
cveCiscoCVE-2014-8029
HistoryJan 09, 2015 - 2:59 a.m.

CVE-2014-8029

2015-01-0902:59:05
cisco
web.nvd.nist.gov
27
cisco
secure access control system
acs
open redirect vulnerability
cve-2014-8029
remote attackers
phishing attacks

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

71.8%

Open redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCuq74150.

Affected configurations

Nvd
Node
ciscosecure_access_control_systemMatch-
VendorProductVersionCPE
ciscosecure_access_control_system-cpe:2.3:a:cisco:secure_access_control_system:-:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

71.8%

Related for CVE-2014-8029