CVE-2013-6695

The CVE concerns Cisco Secure Accessibility Control System (ACS) where the RBAC implementation fails to verify privileges during support‑bundle downloads. This allows an authenticated remote attacker to obtain sensitive information by downloading the bundle, including read access to the user data...