CVE-2014-2130

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-03-06 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka Bug ID CSCuj83189.

Affected products

Cisco Secure Access Control System: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2130
http://www.securitytracker.com/id/1031844
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2130
http://www.securitytracker.com/id/1031844

Get alerted when CVE-2014-2130 or the next vulnerability affects your stack