CVE-2013-3428: Cisco Secure Access Control System

Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days.

The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.

Affected products

• Cisco Secure Access Control System: affected versions not specified

Published 2013-07-15. Last modified 2026-06-16.