SQL Injection Vulnerability in Cisco Secure Access Control Server
CVE-2015-6345

Currently unrated

Key Information:

Vendor

Cisco
Status
Secure Access Control Server
Vendor
CVE Published:
30 October 2015

What is CVE-2015-6345?

A SQL injection vulnerability exists in the Solution Engine of Cisco Secure Access Control Server, specifically in version 5.7(0.15). This security issue enables remote authenticated users to execute arbitrary SQL commands through specially crafted URLs. The exploitation of this vulnerability can lead to unauthorized data access or alteration within the affected system. Users are advised to apply patches and monitor their systems for suspicious activity to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securitytracker.com/id/1033967
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.