Lucene search

K
cveCiscoCVE-2015-0651
HistoryFeb 27, 2015 - 2:59 a.m.

CVE-2015-0651

2015-02-2702:59:34
CWE-352
cisco
web.nvd.nist.gov
34
cve-2015-0651
csrf
cisco
anm
dm
ace
vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

52.2%

Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.

Affected configurations

Nvd
Node
ciscoapplication_networking_managerMatch-
VendorProductVersionCPE
ciscoapplication_networking_manager-cpe:2.3:a:cisco:application_networking_manager:-:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

52.2%

Related for CVE-2015-0651