CVE-2014-8029: Open redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote...

Security readout for executives and security teams

CVE-2014-8029 is an open redirect in the Cisco Secure Access Control System web interface. An attacker could use a trusted ACS URL to send a user to a malicious site, supporting phishing. The bundle does not provide affected versions, patch details, or evidence of active exploitation. Exposure is most relevant where Cisco Secure ACS web interfaces remain reachable by administrators or users who may trust ACS links. Exact affected versions are not provided in the bundle, so exposure cannot be confirmed from the CVE metadata alone. Treat this as a targeted phishing risk rather than a direct system takeover based on the provided evidence. Prioritize confirming whether Cisco Secure ACS is still present and reachable, then follow Cisco’s advisory for remediation status. Mitigation focus: Review Cisco advisory CVE-2014-8029 for affected versions and official remediation.; Inventory any remaining Cisco Secure ACS deployments and web interfaces.; Restrict ACS web interface access to trusted networks where feasible..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.