CVEvulnerability
CVE-2011-0951
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-255
Description
The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.
Affected configurations
• cisco secure access control system 5.1
• cisco secure access control system 5.1.0.44
• cisco secure access control system 5.1.0.44.1
• cisco secure access control system 5.1.0.44.2
• cisco secure access control system 5.1.0.44.3
• cisco secure access control system 5.1.0.44.4
• cisco secure access control system 5.1.0.44.5
• cisco secure access control system 5.2
• cisco secure access control system 5.2.0.26
• cisco secure access control system 5.2.0.26.1
• cisco secure access control system 5.2.0.26.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/43924 Vendor Advisory
- http://securitytracker.com/id?1025271 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml Vendor Advisory
- http://www.securityfocus.com/bid/47093 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0821 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66471 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/43924 Vendor Advisory
- http://securitytracker.com/id?1025271 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml Vendor Advisory
- http://www.securityfocus.com/bid/47093 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0821 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66471 exchange.xforce.ibmcloud.com