Detections
Analytics
Cisco Secure ACS Portal XSS (CSCue65949)
medium Nessus Plugin ID 72141
Language:
Synopsis
The remote host is missing a vendor-supplied security patch.Description
The version of Cisco Secure Access Control System (ACS) running on the remote host is affected by a cross-site scripting (XSS) vulnerability due to insufficient input validation of a parameter.Solution
Apply the Cisco Secure Access Control System patch referenced in Cisco Bug Id CSCue65949.See Also
http://www.nessus.org/u?84179051
https://tools.cisco.com/security/center/viewAlert.x?alertId=32489
Plugin Details
Severity: Medium
ID: 72141
File Name: cisco-sn-CSCue65949-csacs.nasl
Version: 1.7
Type: local
Family: CISCO
Published: 1/27/2014
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:cisco:secure_access_control_system
Required KB Items: Host/Cisco/ACS/Version, Host/Cisco/ACS/DisplayVersion
Exploit Ease: No known exploits are available
Patch Publication Date: 1/17/2014
Vulnerability Publication Date: 1/17/2014
Reference Information
CVE: CVE-2014-0668
BID: 65016