Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
References
Link | Resource |
---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai | Vendor Advisory |
http://osvdb.org/80704 | Broken Link |
http://secunia.com/advisories/48614 | Third Party Advisory |
http://www.securitytracker.com/id?1026860 | Third Party Advisory VDB Entry |
http://www.securityfocus.com/bid/52755 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Information
Published : 2012-03-29 04:01
Updated : 2019-09-27 11:06
NVD link : CVE-2012-0384
Mitre link : CVE-2012-0384
JSON object : View
CWE
CWE-269
Improper Privilege Management
Products Affected
cisco
- ios
- ios_xe