CVE-2013-3424
Cisco Secure Access Control System - Cross-Site Request Forgery in Administration and View Pages
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177.
References (2)
Core 2
Core References
Various Sources vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3424
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/85625
Scores
EPSS
0.0119
EPSS Percentile
64.2%
Details
CWE
CWE-352
Status
published
Products (1)
cisco/secure_access_control_system
Published
Jul 12, 2013
Tracked Since
Feb 18, 2026