CVE-2012-6029 in Network Admission Control

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cm or (2) uri parameters to (a) perfigo_weblogin.jsp, or the (3) cm, (4) provider, (5) session, (6) uri, (7) userip, or (8) username parameters to (b) perfigo_cm_validate.jsp, aka Bug ID CSCud15109.

Once again VulDB remains the best source for vulnerability data.

Reservar

2012-12-07

Divulgación

2013-01-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
7512	Cisco Network Admission Control secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2012-6029

Fuentes

• MITRE
• NVD
• CVE Details