cisco-sa-20180905-acsxxe: Cisco Secure Access Control Server XML External Entity Injection Vulnerability
A vulnerability in the web-based UI of Cisco Secure Access Control Server could allow an authenticated, remote attacker to gain read access to certain information in an affected system. The vulnerability is due to improper handling of XML External Entities (XXEs) when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-acsxxe
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180905-acsxxe?
The severity of cisco-sa-20180905-acsxxe is considered high due to the potential for an attacker to gain unauthorized access to sensitive information.
How do I fix cisco-sa-20180905-acsxxe?
To fix cisco-sa-20180905-acsxxe, apply the latest patches provided by Cisco for the Secure Access Control Server.
What causes the vulnerability in cisco-sa-20180905-acsxxe?
The vulnerability in cisco-sa-20180905-acsxxe is caused by improper handling of XML External Entities (XXEs) when parsing XML.
Who is affected by cisco-sa-20180905-acsxxe?
Any organization using affected versions of Cisco Secure Access Control Server is at risk due to cisco-sa-20180905-acsxxe.
Can cisco-sa-20180905-acsxxe be exploited remotely?
Yes, cisco-sa-20180905-acsxxe can be exploited by an authenticated, remote attacker.