CVE-2015-0700 Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attack...
MediumCVSS 6.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control server solution engine | = 5.4.0.46.6 | No fix listed |
| cisco secure access control server solution engine | = 5.5.0.36 | No fix listed |
| cisco secure access control server solution engine | = 5.5.0.46.4 | No fix listed |
References
- 20150416 Cisco Secure Access Control Server Dashboard Page Cross-Site Request Forgery Vulnerability vendor-advisory
- 1032163 third-party-advisory vdb-entry