Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Secure ACS 远程认证绕过漏洞
Vulnerability Description
Cisco Secure ACS是Cisco网络设备的中央管理平台，用于控制设备的认证和授权。 Cisco Secure ACS中存在认证绕过漏洞，远程攻击者可能利用此漏洞劫持现有的认证后的会话。 在认证后，运行在TCP端口2002上的Cisco Secure ACS Web管理接口会将连接重新定向到1024和65535之间动态分配的端口号上，具体取决于用户用于认证之后HTTP连接的IP地址。这有助于攻击者劫持管理会话，因为端口号是以顺序的方式分配的，没有使用很强的认证。
CVSS Information
N/A
Vulnerability Type
N/A