Cisco ACS Solution Engine XSS漏洞(CVE-2015-6349)
Cisco ACS Solution Engine XSS漏洞(CVE-2015-6349)
Cisco ACS Solution Engine XSS漏洞(CVE-2015-6349)
发布日期:2015-10-31
更新日期:2015-11-02
受影响系统:
Cisco Access Control Server 5.7(0.15)
描述:
CVE(CAN) ID: CVE-2015-6349
Cisco Secure Access Control System是访问策略控制平台。
Cisco Secure Access Control Server (ACS) 5.7(0.15)版本,Solution Engine的Web接口存在XSS漏洞,远程攻击者通过构造的URL,利用此漏洞可注入任意Web脚本或HTML。
<*来源:Cisco
链接:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_xss1
*>
建议:
厂商补丁:
Cisco
-----
Cisco已经为此发布了一个安全公告(cisco-sa-20151023-acs_xss1)以及相应补丁:
cisco-sa-20151023-acs_xss1:Cisco Secure Access Control Server Reflective Cross-Site Scripting Vulnerability
链接:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151023-acs_xss1
本文永久更新链接地址:
评论暂时关闭