CVE-2004-1460

No fix known EPSS 2%

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.

Published 2005-02-13 · CVE record · OSV

Products: cisco secure_access_control_server, cisco secure_acs_solution_engine