Cross-Site Request Forgery Vulnerabilities in Cisco Secure Access Control Server

CVE-2011-3293

Summary

Multiple CSRF vulnerabilities in the Solution Engine of Cisco Secure Access Control Server (ACS) 5.2 enable remote attackers to compromise administrator authentication. By leveraging these vulnerabilities, attackers can execute unauthorized actions by inserting malicious cross-site scripting (XSS) sequences into requests. This could allow an attacker to perform actions on behalf of the administrators without their consent, potentially leading to unauthorized access and manipulation of sensitive configurations.

References