The Authentication Authorization and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products when running with an incomplete TACACS+ configuration without a \tacacs-server host\ command allows remote attackers to bypass authentication and gain privileges aka Bug ID CSCsd21455.