Cisco Secure Access Control Server Solution Engine CVE-2015-0729 Remote File Include Vulnerability

Bugtraq ID:	74667
Class:	Input Validation Error
CVE:	CVE-2015-0729
Remote:	Yes
Local:	No
Published:	May 14 2015 12:00AM
Updated:	May 14 2015 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Secure Access Control Server Solution Engine CVE-2015-0729 Remote File Include Vulnerability

Cisco Secure Access Control Server Solution Engine is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the the affected site. This may allow the attacker to compromise the application; other attacks are also possible.

This issue being tracked by Cisco Bug ID CSCuu11005.

Cisco Secure Access Control Server Solution Engine CVE-2015-0729 Remote File Include Vulnerability

Attackers can use a browser to exploit this issue.

Cisco Secure Access Control Server Solution Engine CVE-2015-0729 Remote File Include Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Secure Access Control Server Solution Engine CVE-2015-0729 Remote File Include Vulnerability

References:

• Cisco Homepage (Cisco )