KLA10104 CI vulnerability in Cisco NAC Appliance

XSS vulnerabilities were found in the Cisco NAC Appliance. By exploiting this vulnerability malicious users can inject arbitrary web scripts. This vulnerability can be exploited from the network at a point related to web-auth.

Original advisories

Cisco bulletin

Related products

Cisco-NAC-Appliance-(formerly-Cisco-Clean-Access-(CCA))

CVE list

CVE-2012-6029 warning

Solution

Update to latest version

Impacts

• CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

Affected Products

• Cisco NAC Appliance 4.9.2 and earlier