Cisco Secure Access Control System CVE-2013-3380 Information Disclosure Vulnerability
BID:60514
Info
Cisco Secure Access Control System CVE-2013-3380 Information Disclosure Vulnerability
| Bugtraq ID: | 60514 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-3380 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2013 12:00AM |
| Updated: | Jun 10 2013 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Secure Access Control System 5.2 26.9 Cisco Secure Access Control System 5.2 26.8 Cisco Secure Access Control System 5.2 26.7 Cisco Secure Access Control System 5.2 26.6 Cisco Secure Access Control System 5.2 26.5 Cisco Secure Access Control System 5.2 26.4 Cisco Secure Access Control System 5.2 26.3 Cisco Secure Access Control System 5.2 26.2 Cisco Secure Access Control System 5.2 26.11 Cisco Secure Access Control System 5.2 26.10 Cisco Secure Access Control System 5.2 26.1 Cisco Secure Access Control System 5.2 26 Cisco Secure Access Control System 5.1 44 Cisco Secure Access Control System 5.0 21 Cisco Secure Access Control System 5.4 Cisco Secure Access Control System 5.3.0.40.7 Cisco Secure Access Control System 5.3.0.40.6 Cisco Secure Access Control System 5.3.0.40.5 Cisco Secure Access Control System 5.3.0.40.4 Cisco Secure Access Control System 5.3.0.40.3 Cisco Secure Access Control System 5.3.0.40.2 Cisco Secure Access Control System 5.3.0.40.1 Cisco Secure Access Control System 5.3.0.40 |
| Not Vulnerable: | |
Discussion
Cisco Secure Access Control System CVE-2013-3380 Information Disclosure Vulnerability
Cisco Secure Access Control System is prone to a remote information-disclosure vulnerability.
Successful exploits will allow attackers to obtain sensitive information. This may result in further attacks.
This issue is tracked by Cisco Bug ID CSCue79279.
Cisco Secure Access Control System is prone to a remote information-disclosure vulnerability.
Successful exploits will allow attackers to obtain sensitive information. This may result in further attacks.
This issue is tracked by Cisco Bug ID CSCue79279.
Exploit / POC
Cisco Secure Access Control System CVE-2013-3380 Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Cisco Secure Access Control System CVE-2013-3380 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Secure Access Control System CVE-2013-3380 Information Disclosure Vulnerability
References:
References: