CVE-2011-3293: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, aka Bug ID CSCtr78143.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3293?
CVE-2011-3293 is classified as a high-severity vulnerability due to its potential for remote attacks.
How do I fix CVE-2011-3293?
To mitigate CVE-2011-3293, update to a patched version of Cisco Secure Access Control Server 5.2.
What type of vulnerability is CVE-2011-3293?
CVE-2011-3293 is a cross-site request forgery (CSRF) vulnerability.
Who is affected by CVE-2011-3293?
Administrators using Cisco Secure Access Control Server version 5.2 are affected by CVE-2011-3293.
What can attackers do with CVE-2011-3293?
Attackers can hijack administrator authentication and perform unauthorized actions by exploiting CVE-2011-3293.