Vulnerabilities > Cisco > ACE XML Gateway > 6.0.1

DATE CVE VULNERABILITY TITLE RISK
2009-09-29 CVE-2009-3457 Information Exposure vulnerability in Cisco ACE web Application Firewall and ACE XML Gateway
Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159.
network
low complexity
cisco CWE-200
5.0