CVE-2018-0218: XEE
First published: Thu Mar 08 2018(Updated: )
A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain information in the affected system. The vulnerability is due to improper handling of XML External Entities (XXEs) when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file. Cisco Bug IDs: CSCve70616.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure ACS Solution Engine | =5.8\(0.8\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0218?
CVE-2018-0218 has been classified as a high-severity vulnerability due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2018-0218?
To fix CVE-2018-0218, upgrade to Cisco Secure Access Control Server version 5.8 patch 9 or later.
Who is affected by CVE-2018-0218?
CVE-2018-0218 affects users of Cisco Secure Access Control Server versions prior to 5.8 patch 9.
What type of attack does CVE-2018-0218 allow?
CVE-2018-0218 allows unauthenticated remote attackers to gain read access to certain information within the affected system.
What is the cause of CVE-2018-0218?
CVE-2018-0218 is caused by improper handling of XML External Entities (XXE) in the web-based user interface.
- agent/weakness
- agent/type
- agent/softwarecombine
- agent/references
- agent/severity
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure acs solution engine
- version/cisco secure acs solution engine/5.8\(0.8\)