<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 08 Nov 2026 12:39:02 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2013-6695</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2013-6695</link>
      <description>&lt;p&gt;The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2013-6695</guid>
    </item>
    <item>
      <title>GHSA-7977-cpc9-f879</title>
      <link>https://db.gcve.eu/vuln/ghsa-7977-cpc9-f879</link>
      <description>&lt;p&gt;The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-7977-cpc9-f879</guid>
    </item>
    <item>
      <title>gsd-2013-6695</title>
      <link>https://db.gcve.eu/vuln/gsd-2013-6695</link>
      <description>gsd-2013-6695</description>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/gsd-2013-6695</guid>
    </item>
    <item>
      <title>VAR-201312-0236</title>
      <link>https://db.gcve.eu/vuln/var-201312-0236</link>
      <description>&lt;p&gt;The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274. Cisco Secure ACS is a central management platform for Cisco network devices that controls device authentication and authorization. 
Successful exploits will allow attackers to obtain sensitive information. This may result in further attacks. 
This issue is tracked by Cisco Bug ID CSCuj39274. The system can respectively control network access and network device access through RADIUS and TACACS protocols&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274. Cisco Secure ACS is a central management platform for Cisco network devices that controls device authentication and authorization. 
Successful exploits will allow attackers to obtain sensitive information. This may result in further attacks. 
This issue is tracked by Cisco Bug ID CSCuj39274. The system can respectively control network access and network device access through RADIUS and TACACS protocols&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/var-201312-0236</guid>
    </item>
  </channel>
</rss>
