Vulnerabilities > Cisco > ACE WEB Application Firewall > 6.0.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-09-29 | CVE-2009-3457 | Information Exposure vulnerability in Cisco ACE web Application Firewall and ACE XML Gateway Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159. | 5.0 |