Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
                
            References
                    | Link | Resource | 
|---|---|
| http://osvdb.org/80704 | Broken Link | 
| http://secunia.com/advisories/48614 | Third Party Advisory | 
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai | Vendor Advisory | 
| http://www.securityfocus.com/bid/52755 | Third Party Advisory VDB Entry | 
| http://www.securitytracker.com/id?1026860 | Third Party Advisory VDB Entry | 
| http://osvdb.org/80704 | Broken Link | 
| http://secunia.com/advisories/48614 | Third Party Advisory | 
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai | Vendor Advisory | 
| http://www.securityfocus.com/bid/52755 | Third Party Advisory VDB Entry | 
| http://www.securitytracker.com/id?1026860 | Third Party Advisory VDB Entry | 
Configurations
                    Configuration 1 (hide)
| 
 | 
Configuration 2 (hide)
| 
 | 
Configuration 3 (hide)
| 
 | 
Configuration 4 (hide)
| 
 | 
Configuration 5 (hide)
| 
 | 
Configuration 6 (hide)
| 
 | 
History
                    21 Nov 2024, 01:34
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://osvdb.org/80704Â - Broken Link | |
| References | () http://secunia.com/advisories/48614Â - Third Party Advisory | |
| References | () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/52755Â - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id?1026860Â - Third Party Advisory, VDB Entry | 
Information
                Published : 2012-03-29 11:01
Updated : 2025-04-11 00:51
NVD link : CVE-2012-0384
Mitre link : CVE-2012-0384
CVE.ORG link : CVE-2012-0384
JSON object : View
Products Affected
                cisco
- ios_xe
- ios
CWE
                
                    
                        
                        CWE-269
                        
            Improper Privilege Management
