Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain information in the affected system. The vulnerability is due to improper handling of XML External Entities (XXEs) when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file. Cisco Bug IDs: CSCve70616.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Cisco Secure Access Control Server 代码问题漏洞
Vulnerability Description
Cisco Secure Access Control Server（ACS）是美国思科（Cisco）公司的一款安全访问控制服务器。该服务器为思科智能信息网络提供基于身份的全面的访问控制解决方案。 Cisco Secure ACS 5.8 patch 9之前的版本中的基于Web的用户界面存在XML外部实体注入漏洞，该漏洞源于程序在解析XML文件时，没有正确的处理XML外部实体。远程攻击者可通过诱使管理员导入特制的XML文件利用该漏洞获取受影响系统中信息的读取权限。
CVSS Information
N/A
Vulnerability Type
N/A