CVE-2013-3428 Information

Description

The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error aka Bug ID CSCue65957.

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3428