PT-2013-2963

CVE-2013-1196

·

Published

2013-04-29

·

Updated

2013-04-30

Description by

CVSS 2.0
6.8
Medium
MetricsAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System (ACS) (affected versions not specified) Cisco Identity Services Engine Software (affected versions not specified) Cisco Context Directory Agent (affected versions not specified) Cisco Application Networking Manager (ANM) (affected versions not specified) Cisco Prime Network Control System (affected versions not specified) Cisco Prime LAN Management Solution (LMS) (affected versions not specified) Cisco Prime Collaboration (affected versions not specified) Cisco Unified Provisioning Manager (affected versions not specified) Cisco Network Services Manager (affected versions not specified) Cisco Prime Data Center Network Manager (DCNM) (affected versions not specified) Cisco Quad (affected versions not specified)
Description The command-line interface in various Cisco products does not properly validate input, allowing local users to obtain root privileges via unspecified vectors.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾