NVD

Id
31471  
Name
CVE-2014-3267  
Description
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-25  
Modified Date
2016-09-07  
Seq
2014-3267  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165062 31471 CVE-2014-3267 20140521 Cisco Security Manager Cross-Site Request Forgery Vulnerability  View
165063 31471 CVE-2014-3267 http://tools.cisco.com/security/center/viewAlert.x?alertId=34325  View
165064 31471 CVE-2014-3267 1030271  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13771 JVNDB-2014-002646 Cisco Security Manager の Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性 Cisco Security Manager の Web フレームワークには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-3267 70555 CVE-2014-3267 31471 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002646.html 2014-05-21 2014-05-28 View