CVE-2013-3380

2013-06-1203:30:15

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

40.3%

JSON

The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279.

Affected configurations

Nvd

Node

ciscosecure_access_control_server_solution_engineMatch-

VendorProductVersionCPE
ciscosecure_access_control_server_solution_engine-cpe:2.3:h:cisco:secure_access_control_server_solution_engine:-:*:*:*:*:*:*:*