CVE-2014-2130: Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Ap...

Security readout for executives and security teams

CVE-2014-2130 affects Cisco Secure Access Control Server by exposing an unintended Apache Tomcat administration interface. An authenticated remote user with administrative privileges could change application or configuration files and potentially run arbitrary code. The bundle does not provide affected versions, CVSS, or confirmed exploitation. Exposure is most likely in environments still running Cisco Secure ACS where administrative access is reachable by administrators or over management networks. The bundle lists no affected versions or CPEs, so asset confirmation must come from Cisco guidance and local inventory. Prioritize review if Cisco ACS remains in production, especially in identity or network access control roles. The issue requires admin access, but successful abuse could compromise the ACS platform and affect trust decisions across dependent systems. Mitigation focus: Review Cisco’s security notice for affected ACS versions and official remediation.; Confirm whether Cisco ACS is still deployed or has been retired.; Restrict ACS administration access to trusted management networks and administrators..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.