What is the severity of CVE-2018-0207?

CVE-2018-0207 has a severity rating of critical due to its potential to allow remote attackers to read sensitive information.

How do I fix CVE-2018-0207?

To fix CVE-2018-0207, update your Cisco Secure Access Control Server to version 5.8 patch 9 or later.

What causes the CVE-2018-0207 vulnerability?

CVE-2018-0207 is caused by improper handling of XML External Entities in the web-based user interface of the Cisco Secure Access Control Server.

Who is affected by CVE-2018-0207?

CVE-2018-0207 affects users of Cisco Secure Access Control Server versions prior to 5.8 patch 9.

Can CVE-2018-0207 be exploited remotely?

Yes, CVE-2018-0207 can be exploited remotely by unauthenticated attackers.

Vulnerability/
CVE-2018-0207

medium

4.3

CWE

611 200

8/3/2018

2/12/2024

CVE-2018-0207: XEE

First published: Thu Mar 08 2018(Updated: )

A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain information in the affected system. The vulnerability is due to improper handling of XML External Entities (XXEs) when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file. Cisco Bug IDs: CSCve70595.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Secure ACS Solution Engine	=5.8\(0.8\)

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-0207?
CVE-2018-0207 has a severity rating of critical due to its potential to allow remote attackers to read sensitive information.
How do I fix CVE-2018-0207?
To fix CVE-2018-0207, update your Cisco Secure Access Control Server to version 5.8 patch 9 or later.
What causes the CVE-2018-0207 vulnerability?
CVE-2018-0207 is caused by improper handling of XML External Entities in the web-based user interface of the Cisco Secure Access Control Server.
Who is affected by CVE-2018-0207?
CVE-2018-0207 affects users of Cisco Secure Access Control Server versions prior to 5.8 patch 9.
Can CVE-2018-0207 be exploited remotely?
Yes, CVE-2018-0207 can be exploited remotely by unauthenticated attackers.

agent/weakness
agent/type
agent/softwarecombine
agent/author
agent/references
agent/severity
agent/first-publish-date
agent/event
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco secure acs solution engine
version/cisco secure acs solution engine/5.8\(0.8\)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.