CVE-2011-0951

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2011-04-04

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Secure Access Control System (Cisco)

References

• http://secunia.com/advisories/43924
• http://securitytracker.com/id?1025271
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml
• http://www.securityfocus.com/bid/47093
• http://www.vupen.com/english/advisories/2011/0821
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66471