Cisco Secure Access Control System CVE-2017-12354 Information Disclosure Vulnerability

Bugtraq ID:	101986
Class:	Design Error
CVE:	CVE-2017-12354
Remote:	Yes
Local:	No
Published:	Nov 29 2017 12:00AM
Updated:	Dec 19 2017 10:01PM
Credit:	Cisco
Vulnerable:	Cisco Secure Access Control System 0 Cisco Secure Access Control Server Solution Engine 5.8(0.32)
Not Vulnerable:

Cisco Secure Access Control System CVE-2017-12354 Information Disclosure Vulnerability

Cisco Secure Access Control System is prone to a remote information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information. This may result in further attacks.

This issue is tracked by Cisco Bug ID CSCvf66155.

Cisco Secure Access Control System CVE-2017-12354 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Secure Access Control System CVE-2017-12354 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Secure Access Control System CVE-2017-12354 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Secure Access Control System Information Disclosure Vulnerability (Cisco)