CVEvulnerability
CVE-2013-3424
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177.
Affected configurations
• cisco secure access control system
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3424 tools.cisco.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85625 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3424 tools.cisco.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85625 exchange.xforce.ibmcloud.com