Vulnerability Description
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Secure Access Control Server | 3.0 |
| Cisco | Secure Acs Solution Engine | All versions |
References
- http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtmlPatchVendor Advisory
- http://www.securityfocus.com/bid/11047
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17117
- http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtmlPatchVendor Advisory
- http://www.securityfocus.com/bid/11047
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17117
FAQ
What is CVE-2004-1460?
CVE-2004-1460 is a vulnerability with a CVSS score of 7.5 (HIGH). Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to...
How severe is CVE-2004-1460?
CVE-2004-1460 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-1460?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Secure Access Control Server, Cisco Secure Acs Solution Engine.