CVE-2014-0667: The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requi...

Security readout for executives and security teams

CVE-2014-0667 is an authorization weakness in the RMI interface of Cisco Secure Access Control System. An authenticated remote user could read arbitrary files through that interface. The public bundle does not provide affected versions, CVSS scoring, or detailed remediation, so urgency depends on whether ACS and its RMI interface exist in your environment. Exposure is most likely where Cisco Secure ACS is deployed and its RMI interface is reachable by authenticated users beyond a tightly controlled administrator group. Version-level exposure cannot be confirmed from the provided bundle. Treat this as a targeted exposure issue, not an internet-wide emergency based on the supplied evidence. Prioritize quickly if ACS is still used for identity or network access control, because arbitrary file read can expose sensitive configuration or credential material. Mitigation focus: Check Cisco's advisory for affected ACS versions and vendor remediation guidance.; Restrict ACS RMI and administrative access to trusted management networks.; Review ACS user permissions and remove unnecessary authenticated access..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.