VulnerabilityModified
CVE-2015-0651
Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of…
MEDIUM 6.8EPSS 0.64%
Does this matter?
Lower severity and a low EPSS score (0.64%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.64% probability · 49th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- cisco/application networking manager
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651Vendor Advisory
- http://www.securityfocus.com/bid/72796
- http://www.securitytracker.com/id/1031815
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651Vendor Advisory
- http://www.securityfocus.com/bid/72796
- http://www.securitytracker.com/id/1031815
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.