Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session which allows remote attackers to obtain sensitive information via crafted packets related to an \iFrame vulnerability \ aka Bug ID CSCuh84801.