CVE-2013-3428

The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2013-07-15

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Secure Access Control System (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3428