Cisco Secure Access Control Server is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks.
This issue is being tracked by Cisco bug ID CSCve70595.
Information
Cisco Secure Access Control Server
Exploit
An attacker can exploit this issue using readily available tools.
References: