VulnerabilityModified

CVE-2013-1200

Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787.

MEDIUM 6.8EPSS 1.21%

Does this matter?

Lower severity and a low EPSS score (1.21%). Track it; it rarely justifies an emergency change on its own.

Description

Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 1.21% probability · 67th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: cisco/secure access control system
Source: psirt@cisco.com

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1200Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1200Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.