CVE-2017-3839
N/A
N/A
Summary
An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5.8(2.5).
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Cisco Secure Access Control System | Cisco Secure Access Control System | affected |
Weaknesses
- XML External Entity Vulnerability
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/96236
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs1
- http://www.securitytracker.com/id/1037836
References
- http://www.securityfocus.com/bid/96236
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs1
- http://www.securitytracker.com/id/1037836
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.