Cisco Network Admission Control Directory Traversal Vulnerability

A vulnerability has been identified in Cisco Network Admission Control (NAC), which can be exploited by malicious people to disclose sensitive information.

Certain input passed to the management interface via the URL is not properly verified before being used. This can be exploited to disclose the contents of arbitrary files via directory traversal sequences.