CVE-2013-3428

Cisco Secure Access Control System - Authenticated Sensitive Information Exposure via Error Message

Title source: llm

Description

The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3428

Scores

EPSS 0.0095

EPSS Percentile 56.9%

Details

CWE

CWE-200

Status published

Products (1)

cisco/secure_access_control_system

Published Jul 15, 2013

Tracked Since Feb 18, 2026