Lucene search
CiscoCVE-2013-5471HistorySep 05, 2013 - 3:27 a.m.
CVE-2013-5471
2013-09-0503:27:32
CWE-352
cisco
web.nvd.nist.gov
25
cisco
gss
csrf
vulnerability
web framework
authentication hijacking
nvd
cve-2013-5471
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.002
Percentile
52.3%
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164.
Affected configurations
Node
ciscoglobal_site_selectorMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | global_site_selector | - | cpe:2.3:h:cisco:global_site_selector:-:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2013-5471
2013-09-05 03:27:32
cisco
cisco
Cisco Global Site Selector Cross-Site Request Forgery Vulnerability
2013-09-04 20:01:10
prion
prion
Cross site request forgery (csrf)
2013-09-05 03:27:00
cvelist
cvelist
CVE-2013-5471
2013-09-05 01:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.002
Percentile
52.3%
Related for CVE-2013-5471