← back
CVE-2011-0951

CVE-2011-0951

23Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 15%
exploitation probability
15%top 4% of all CVEs
observed exploitation
nono source reports it
The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.
Affected products
n/a · n/a
References
http://secunia.com/advisories/43924http://securitytracker.com/id?1025271https://exchange.xforce.ibmcloud.com/vulnerabilities/66471http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtmlhttp://www.securityfocus.com/bid/47093http://www.vupen.com/english/advisories/2011/0821