Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Secure Access Control Server Solution Engine 权限许可和访问控制漏洞
Vulnerability Description
Cisco Secure Access Control Server（ACS）是美国思科（Cisco）公司的一款安全访问控制服务器。Solution Engine是其中的一个服务器引擎解决方案。 Cisco Secure ACS 5.7(0.15)版本的Solution Engine中存在安全漏洞，该漏洞源于程序没有正确执行RBAC验证。远程攻击者可通过访问受限制的Web页面利用该漏洞绕过既定的RBAC限制，创建控制面板或门户组件。
CVSS Information
N/A
Vulnerability Type
N/A