Vulnerability Bulletins |
Cisco IOS Software Authentication Proxy Bypass Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the Authentication Proxy feature of Cisco IOS Software could allow a remote attacker to bypass the authentication.The vulnerability is due to the incorrect processing of unsupported Authentication, Authorization, and Accounting (AAA) return codes from the AAA feature by the Authentication Proxy. An attacker could exploit this vulnerability by, for example, connecting with an empty password and hoping that the AAA server (RADIUS or TACACS+) will reply to Cisco IOS with a code More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150303-CVE-2015-0607?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20IOS%20Software%20Authentication%20Proxy%20Bypass%20Vulnerabi |
|