Unrated severityNVD Advisory· Published Dec 2, 2013· Updated Jun 17, 2026

CVE-2013-6695

Description

The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Secure Access Control System2 versions
cpe:2.3:a:cisco:secure_access_control_system:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:secure_access_control_system:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6695nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000