Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
References
Link | Resource |
---|---|
http://osvdb.org/80704 | Broken Link |
http://secunia.com/advisories/48614 | Third Party Advisory |
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai | Vendor Advisory |
http://www.securityfocus.com/bid/52755 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id?1026860 | Third Party Advisory VDB Entry |
http://osvdb.org/80704 | Broken Link |
http://secunia.com/advisories/48614 | Third Party Advisory |
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai | Vendor Advisory |
http://www.securityfocus.com/bid/52755 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id?1026860 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
21 Nov 2024, 01:34
Type | Values Removed | Values Added |
---|---|---|
References | () http://osvdb.org/80704Â - Broken Link | |
References | () http://secunia.com/advisories/48614Â - Third Party Advisory | |
References | () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/52755Â - Third Party Advisory, VDB Entry | |
References | () http://www.securitytracker.com/id?1026860Â - Third Party Advisory, VDB Entry |
Information
Published : 2012-03-29 11:01
Updated : 2024-11-21 01:34
NVD link : CVE-2012-0384
Mitre link : CVE-2012-0384
CVE.ORG link : CVE-2012-0384
JSON object : View
Products Affected
cisco
- ios_xe
- ios
CWE
CWE-269
Improper Privilege Management