CVE-2011-0951

Description

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/66471

http://www.vupen.com/english/advisories/2011/0821

http://www.securityfocus.com/bid/47093

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml

http://securitytracker.com/id?1025271

http://secunia.com/advisories/43924

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3