CVE-2017-3839
Summary
| CVE | CVE-2017-3839 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-02-22 02:59:00 UTC |
| Updated | 2019-10-03 00:03:00 UTC |
| Description | An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5.8(2.5). |
Risk And Classification
Problem Types: CWE-611
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Secure Access Control System | 5.8(2.5) | All | All | All |
| Application | Cisco | Secure Access Control System | 5.8\(2.5\) | All | All | All |
| Application | Cisco | Secure Access Control System | 5.8\(2.5\) | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Secure Access Control System XML External Entity Information Disclosure Vulnerability | BID | www.securityfocus.com | |
| Cisco Secure Access Control System XML External Entity Processing Bug Lets Remote Users Obtain Potentially Sensitive Information - SecurityTracker | SECTRACK | www.securitytracker.com | |
| Cisco Secure Access Control System XML External Entity Vulnerability | CONFIRM | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.