CVE-2002-0160: The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and...

Security readout for executives and security teams

This old Cisco Secure ACS for Windows flaw could let a remote attacker read certain web-related files outside the intended administration web directory. The affected service is an access-control administration system, so exposure matters most where the ACS admin interface is reachable from untrusted networks. Likely exposure is limited to legacy Cisco Secure ACS for Windows deployments with the administration interface reachable over the network. Modern environments are mainly at risk if old ACS instances remain in production, lab, or forgotten management segments. Treat this as a legacy exposure cleanup item unless the ACS admin interface is internet-facing or reachable by broad internal networks. Prioritize discovery, isolation, and vendor-guidance review because ACS is part of authentication infrastructure. Mitigation focus: Inventory Cisco Secure ACS for Windows instances and versions.; Check Cisco's advisory for vendor-supported fixes or upgrade guidance.; Restrict ACS administration access to trusted management networks only..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.