CVE-2015-6345: SQL Injection
SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuw24700.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6345?
CVE-2015-6345 is classified as a medium severity vulnerability due to the potential for SQL injection attacks.
How do I fix CVE-2015-6345?
To fix CVE-2015-6345, update Cisco Secure Access Control Server to a version that is not vulnerable, as specified by Cisco's security advisory.
Who is affected by CVE-2015-6345?
CVE-2015-6345 affects users of Cisco Secure Access Control Server version 5.7(0.15) and below.
What type of vulnerability is CVE-2015-6345?
CVE-2015-6345 is an SQL injection vulnerability that allows remote authenticated users to execute arbitrary SQL commands.
Can CVE-2015-6345 be exploited remotely?
Yes, CVE-2015-6345 can be exploited remotely by authenticated users through a specially crafted URL.