{"uuid": "01a5b29c-9ea9-4b3c-bf33-b333a42e7e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0951", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_secure_acs_bypass.rb", "content": "{\"actions\": [], \"aliases\": [\"auxiliary/admin/cisco/cisco_secure_acs_bypass\"], \"arch\": \"\", \"author\": [\"Jason Kratzer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass issue which allows arbitrary\\n          password change requests to be issued for any user in the local store.\\n          Instances of Secure ACS running version 5.1 with patches 3, 4, or 5 as well\\n          as version 5.2 with either no patches or patches 1 and 2 are vulnerable.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/admin/networking/cisco_secure_acs_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Cisco Secure ACS Unauthorized Password Change\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/networking/cisco_secure_acs_bypass.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/networking/cisco_secure_acs_bypass\", \"references\": [\"BID-47093\", \"CVE-2011-0951\", \"URL-http://www.cisco.com/en/US/products/csa/cisco-sa-20110330-acs.html\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:53.629332Z"}