CVE-2017-6769: XSS

Published Aug 7, 2017

Updated

A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCve70587. Known Affected Releases: 5.8(0.8) 5.8(1.5).

Affected Software

2 affected components

Cisco Secure Access Control System=5.8\(0.8\)

Cisco Secure Access Control System=5.8\(1.5\)

Event History

Aug 7, 2017

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-6769?

CVE-2017-6769 has been classified as a medium severity vulnerability.

How do I fix CVE-2017-6769?

To fix CVE-2017-6769, update the Cisco Secure Access Control System to a version that includes the patch for this vulnerability.

What systems are affected by CVE-2017-6769?

CVE-2017-6769 affects Cisco Secure Access Control System versions 5.8(0.8) and 5.8(1.5).

What type of attack does CVE-2017-6769 allow?

CVE-2017-6769 allows an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack.

Who can be affected by CVE-2017-6769?

Users of the web-based management interface of the affected Cisco Secure Access Control System may be affected by CVE-2017-6769.