CISCO BUG CSCve70587 - Stored Cross Site Vulnerablity

[KEVIN WINANT]

Hello, does this bug impact ACS v5.8.0.32 patch 7?

See in the release notes for v5.8 under

Resolved Issues in Cumulative Patch ACS 5.8.0.32.8

it list this for the bug in table 14:

CSCve70587   Stored Cross-site scripting (XSS) in Cisco ACS 5.8.1.4.

So confused on if 5.8.0.32 patch 7 is vulnerable.

Thanks In Advance!!

[kthiruve · Accepted solution]

Hi Kevin,

This is fixed in Patch 8. Please see the release noted below.

Release Notes for Cisco Secure Access Control System 5.8 - Cisco

Thanks

Krishnan