The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3363
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3428