CVE-2013-3380: The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) d...

Security readout for executives and security teams

CVE-2013-3380 affects the administrative web interface of Cisco Secure ACS. A logged-in remote user could access a report view page that was not properly restricted and obtain sensitive information. The bundle does not provide CVSS, affected version ranges, or fixed release details. Exposure is limited to organizations running Cisco Secure Access Control System with administrative web access reachable by authenticated users. The source bundle does not identify exact vulnerable versions or deployment prerequisites beyond authenticated remote access. Treat as a targeted access-control risk, not an internet-scale emergency based on current evidence. Prioritize review if Cisco Secure ACS remains in use for identity or network access administration, because sensitive reporting data could aid follow-on attacks. Mitigation focus: Check Cisco’s advisory for affected releases and fixed software guidance.; Restrict ACS administrative web access to trusted management networks.; Review ACS user roles and remove unnecessary administrative interface access..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.