|
Cisco Secure ACS EAP-TLS User Authentication Bypass Vulnerability
|
|
Secunia Advisory:
|
SA13066
|
|
|
Release Date:
|
2004-11-03
|
|
Last Update:
|
2004-12-07
|
|
Popularity:
|
15,077 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Cisco Secure ACS Solution Engine 3.x
|
|
| Software: | Cisco Secure ACS 3.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
A vulnerability has been reported in Cisco Secure Access Control Server and Cisco Secure ACS Solution Engine, which can be exploited by malicious people to bypass the user authentication.
The problem is that it is possible to be authenticated via an invalid, cryptographically correct certificate (e.g. comes from an untrusted CA or has expired) as long as a valid user name is used.
Successful exploitation may allow bypassing user authentication, but requires that the device is configured to use EAP-TLS (Extensible Authentication Protocol-Transport Layer Security).
Also, exploitation has no impact on user authentication, if EAP-TLS is configured with binary comparison of user certificates as the only comparison method and if the user entry in Lightweight Directory Access Protocol/Active Directory (LDAP/AD) contains only valid certificates.
The vulnerability affects version 3.3.1 of the Cisco Secure ACS for Windows and Cisco Secure ACS Solution Engine.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
