Lucene search

K
cveCiscoCVE-2013-1200
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1200

2022-10-0316:14:49
CWE-287
cisco
web.nvd.nist.gov
26
cve-2013-1200
session fixation
cisco
secure access control system
acs
remote attackers
web sessions
vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

62.2%

Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787.

Affected configurations

Nvd
Node
ciscosecure_access_control_systemMatch-
VendorProductVersionCPE
ciscosecure_access_control_system-cpe:/a:cisco:secure_access_control_system:-:::

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

62.2%

Related for CVE-2013-1200