Cisco Secure Access Control System CVE-2013-3428 Information Disclosure Vulnerability

Bugtraq ID:	61174
Class:	Access Validation Error
CVE:	CVE-2013-3428
Remote:	Yes
Local:	No
Published:	Jul 15 2013 12:00AM
Updated:	Jul 15 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Secure Access Control System 5.4.0.46.3 Cisco Secure Access Control System 5.4.0.46.2 Cisco Secure Access Control System 5.4.0.46.1 Cisco Secure Access Control System 5.4 Cisco Secure Access Control System 5.3.0.6 Cisco Secure Access Control System 5.3.0.40.7 Cisco Secure Access Control System 5.3.0.40.6 Cisco Secure Access Control System 5.3.0.40.5 Cisco Secure Access Control System 5.3.0.40.4 Cisco Secure Access Control System 5.3.0.40.3 Cisco Secure Access Control System 5.3.0.40.2 Cisco Secure Access Control System 5.3.0.40.1 Cisco Secure Access Control System 5.3.0.40 Cisco Secure Access Control System 5.3
Not Vulnerable:

Cisco Secure Access Control System CVE-2013-3428 Information Disclosure Vulnerability

Cisco Secure Access Control System is prone to a remote information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information. This may result in further attacks.

This issue is tracked by Cisco Bug ID CSCue65957.

Cisco Secure Access Control System CVE-2013-3428 Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

Cisco Secure Access Control System CVE-2013-3428 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Secure Access Control System CVE-2013-3428 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Secure Access Control System Error Condition Information Disclosure Issue (Cisco)
  
• Cisco Secure Access Control System Error Condition Information Disclosure Vulner (Cisco)