Home

CVE-2017-3841

Description

A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive information. More Information: CSCvc04854. Known Affected Releases: 5.8(2.5).

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.441

Associated Vulnerability

VulnerabilityOS Platform
Cisco Secure Access Control System Information Disclosure Vulnerability For Cisco Secure Access Control Server Solution EngineNCM
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3841)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1705698Security Update for Cisco Secure Access Control Server Solution Engine 5.8(0.32.2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234