25 Fév 2015

CVE-2015-0651

Publié par . Publié dans CSRF Cross-Site Request Forgery

Vulnerability Details : CVE-2015-0651

Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.
Publish Date : 2015-02-26 Last Update Date : 2015-03-09

- CVSS Scores & Vulnerability Types

CVSS Score	6.8
Confidentiality Impact	Partial(There is considerable informational disclosure.)
Integrity Impact	Partial(Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact	Partial(There is reduced performance or interruptions in resource availability.)
Access Complexity	Medium(The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required(Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	CSRF
CWE ID	352

- Products Affected By CVE-2015-0651

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	Application	Cisco	Application Networking Manager	-				Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Cisco	Application Networking Manager	1

- References For CVE-2015-0651

http://www.securitytracker.com/id/1031815
SECTRACK 1031815

http://www.securityfocus.com/bid/72796
BID 72796 Cisco Application Networking Manager CVE-2015-0651 Cross Site Request Forgery Vulnerability Release Date:2015-03-08

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651
CISCO 20150226 Cisco ACE 4710 Application Control Engine and Application Neworking Manager Cross-Site Request Forgery Vulnerability

- Metasploit Modules Related To CVE-2015-0651

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)

CVE-2015-0651

Vulnerability Details : CVE-2015-0651

- CVSS Scores & Vulnerability Types

- Products Affected By CVE-2015-0651

- Number Of Affected Versions By Product

- References For CVE-2015-0651

- Metasploit Modules Related To CVE-2015-0651

Pour nous Contacter

Newsletter Cybersécurité

Ressources Sécurité

Notre expertise cybersécurité validée par de multiples certifications internationales