Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-3380
information security
cisco
cve-2013-3380
access control server
acs
bug id cscue79279
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.5%
The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279.
Affected configurations
Node
ciscosecure_access_control_server_solution_engineMatch-
Related
nvd
nvd
CVE-2013-3380
2013-06-12 03:30:15
cvelist
cvelist
CVE-2013-3380
2022-10-03 16:14:44
cisco
cisco
Cisco Access Control Server Privilege Escalation Vulnerability
2013-06-11 14:58:52
prion
prion
Information disclosure
2013-06-12 03:30:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.5%
Related for CVE-2013-3380