Skip to content
OpenAdvisories
Unscored CVE-2017-3839 EUVD-2017-12956GHSA-vgvw-m3x5-grc3

An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthe…

Published Feb 22, 2017 · Updated Aug 5, 2024 · Assigned by cisco

Description

An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5.8(2.5).

Affected products

VendorProductAffectedFixed
— Cisco Secure Access Control System Cisco Secure Access Control System —

References