Cisco Wireless LAN Controller CVE-2013-6698 Cross Frame Scripting Vulnerability

Bugtraq ID:	63866
Class:	Origin Validation Error
CVE:	CVE-2013-6698
Remote:	Yes
Local:	No
Published:	Nov 21 2013 12:00AM
Updated:	Nov 25 2013 12:34AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Cisco Wireless LAN Controller CVE-2013-6698 Cross Frame Scripting Vulnerability

Cisco Wireless LAN Controller is prone to a cross-frame scripting vulnerability.

Successful exploits will allow attackers to bypass the same-origin policy and perform unauthorized actions; other attacks are possible.

This issue is being tracked by Cisco Bug ID CSCuf77821.

Cisco Wireless LAN Controller CVE-2013-6698 Cross Frame Scripting Vulnerability

Attackers can exploit this issue by tricking an unsuspecting victim into visiting a malicious web page.

Cisco Wireless LAN Controller CVE-2013-6698 Cross Frame Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Wireless LAN Controller CVE-2013-6698 Cross Frame Scripting Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Wireless LAN Controller Home Page (Cisco )