OSVDB ID: 34892 Title: Cisco IOS AAA tclsh Command Authentication Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Cisco IOS contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the Authentication, Authorization, and Accounting (AAA) command authorization feature is enabled and the TCL shell is available. This flaw may lead to a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Authentication Management Impact: Loss of Integrity Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Upgrade to the latest version available for your equipment, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|