NVD

Id
39231  
Name
CVE-2013-3428  
Description
The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-07-15  
Modified Date
2013-07-16  
Seq
2013-3428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200425 39231 CVE-2013-3428 20130712 Cisco Secure Access Control System Error Condition Information Disclosure Issue  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21777 JVNDB-2013-003352 Cisco Secure Access Control System の Web インターフェースにおける重要な情報を取得される脆弱性 Cisco Secure Access Control System (ACS) の Web インターフェースは、エラー状態の詳細 (error-condition details) を適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2013-3428 63370 CVE-2013-3428 39231 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003352.html 2013-07-15 2013-07-17 View