CVE-2009-3457

Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that…

published September 29, 2009

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04193 · 90.9th percentile
Published
2009-09-29T17:00Z
EPSS history
Timeline
  • 29 SEP 17:00Z
    Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that…
    cvelistv5