CVE-2013-3380 | BDVDB-2026-56150 Detail

Description#

The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3380

Exploit#

No public exploit known

History#

Version 12013-06-12Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.