Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
References
Link | Resource |
---|---|
http://osvdb.org/80704 | Broken Link |
http://secunia.com/advisories/48614 | Third Party Advisory |
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai | Vendor Advisory |
http://www.securityfocus.com/bid/52755 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id?1026860 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
No history.
Information
Published : 2012-03-29 11:01
Updated : 2019-09-27 18:06
NVD link : CVE-2012-0384
Mitre link : CVE-2012-0384
CVE.ORG link : CVE-2012-0384
JSON object : View
Products Affected
cisco
- ios
- ios_xe
CWE
CWE-269
Improper Privilege Management