CVEvulnerability
CVE-2015-0651
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.
Affected configurations
• cisco application networking manager
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651 Vendor Advisory
- http://www.securityfocus.com/bid/72796 www.securityfocus.com
- http://www.securitytracker.com/id/1031815 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651 Vendor Advisory
- http://www.securityfocus.com/bid/72796 www.securityfocus.com
- http://www.securitytracker.com/id/1031815 www.securitytracker.com