CSRF in Cisco Secure Access Control System
CVE-2013-3424
Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Secure_access_control_system
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)