Version information of installed applications Show version command, as shown in the followingĬisco Application Deployment Engine OS Release: 1.2Ĭopyright (c) 2005-2009 by Cisco Systems, Inc. The following methods can be used to determine which version of theįrom the Cisco Secure ACS command-line interface (CLI), issue the The previous list applies to both the hardware appliance and the This advisory is available at the following link: There are no workarounds for this vulnerability.
Cisco acs download free software#
An exploit could allow the attacker to successfully authenticate to any system using TACACS+ in combination with an affected Cisco Secure ACS.Ĭisco has released software updates that address this vulnerability. Vulnerability, and the exploitation is limited to impersonate only that user. The attacker would need to know a valid username stored in the LDAP external identity store to exploit this The vulnerability is due to improper validation of the user-supplied password when TACACS+ is the authentication protocol and Cisco Secure ACS is configured with a Lightweight Directory Access Protocol (LDAP) external identity store.Īn attacker may exploit this vulnerability by sending a special sequence ofĬharacters when prompted for the user password.
Unauthenticated, remote attacker to bypass TACACS+ based authentication Cisco Secure Access Control System (ACS) contains a vulnerability that could allow an
0 kommentar(er)
