NetSight
IP …
medium5.0Public exploit code

CVE-2009-3457

Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that l…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159.

Affected products

VendorProductAffected versions
CiscoAce Web Application Firewall
through 6.0\(3\)
Versions 6.0\(0\), 6.0\(1\), 6.0\(2\)
CiscoAce Xml Gateway
through 6.0\(3\)
Versions 6.0\(0\), 6.0\(1\), 6.0\(2\)

Weakness classification

CWE-200

References