ID de Prueba:	1.3.6.1.4.1.25623.1.0.106993
Categoría:	CISCO
Título:	Cisco Access Control System Stored Cross-Site Scripting Vulnerability
Resumen:	A vulnerability in the web-based management interface of the Cisco Secure;Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting;(XSS) attack against a user of the web interface of the affected system.
Descripción:	Summary: A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. Vulnerability Insight: The vulnerability is due to insufficient input validation of user-supplied values and a lack of encoding of user-supplied data. Vulnerability Impact: An attacker could exploit this vulnerability by convincing a user to click a malicious link. Solution: See the referenced vendor advisory for a solution. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6769 BugTraq ID: 99985 http://www.securityfocus.com/bid/99985 http://www.securitytracker.com/id/1038996
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.