Test Kennung:	1.3.6.1.4.1.25623.1.0.106605
Kategorie:	CISCO
Titel:	Cisco Secure Access Control System Cross-Site Scripting Vulnerability
Zusammenfassung:	A vulnerability in Cisco Secure Access Control System (ACS) could allow an;unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the;web interface of the affected system.
Beschreibung:	Summary: A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. Vulnerability Insight: The vulnerability is due to insufficient input validation of a user-supplied value. Vulnerability Impact: An attacker may be able to exploit this vulnerability by intercepting the user packets and injecting malicious code. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3838 BugTraq ID: 96234 http://www.securityfocus.com/bid/96234 http://www.securitytracker.com/id/1037835
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.