Lucene search

CiscoCVE-2015-0746

HistoryMay 22, 2015 - 12:59 a.m.

CVE-2015-0746

2015-05-2200:59:00

CWE-254

cisco

web.nvd.nist.gov

cisco

access control server

acs

rest api

denial of service

bug id

cscut62022

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

52.0%

JSON

The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022.

Affected configurations

Nvd

Node

ciscosecure_access_control_serverMatch5.5\(0.46.2\)

VendorProductVersionCPE
ciscosecure_access_control_server5.5(0.46.2)cpe:2.3:a:cisco:secure_access_control_server:5.5\(0.46.2\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	secure_access_control_server	5.5(0.46.2)	cpe:2.3:a:cisco:secure_access_control_server:5.5\(0.46.2\):::::::*

References

tools.cisco.com/security/center/viewAlert.x?alertId=38946

www.securitytracker.com/id/1032387

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

52.0%

JSON

Related for CVE-2015-0746