Lucene search
+L

CVE-2011-0951

🗓️ 01 Apr 2011 21:00:00Reported by ciscoType 
cve
 cve
🔗 web.nvd.nist.gov👁 88 Views🌐 WEB

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2011-0951
16 Jul 202015:38
–circl
cisco
Cisco
Cisco Secure Access Control System Password Modification Vulnerability
30 Mar 201116:24
–cisco
nessus
Tenable Nessus
Cisco Secure ACS Unauthorized Password Change
11 Apr 201300:00
–nessus
cvelist
Cvelist
CVE-2011-0951
1 Apr 201121:00
–cvelist
metasploit
Metasploit
Cisco Secure ACS Unauthorized Password Change
22 Jun 202010:11
–metasploit
nvd
NVD
CVE-2011-0951
4 Apr 201112:27
–nvd
packetstorm
Packet Storm
Cisco Secure ACS Unauthorized Password Change
31 Aug 202400:00
–packetstorm
prion
Prion
Design/Logic Flaw
4 Apr 201112:27
–prion
ptsecurity
Positive Technologies
PT-2011-2776
1 Apr 201100:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2011-0951: Undefined Security Weakness
1 Apr 201100:00
–rapid7
Rows per page
ParameterPositionPathDescriptionCWE
v1request body/PI/services/UCP/Exploits an authentication bypass in Cisco Secure ACS allowing arbitrary password change via SOAP request to the UCP service (SOAPAction changeUserPass).CWE-255
v2request body/PI/services/UCP/Exploits an authentication bypass in Cisco Secure ACS allowing arbitrary password change via SOAP request to the UCP service (SOAPAction changeUserPass).CWE-255
v3request body/PI/services/UCP/Exploits an authentication bypass in Cisco Secure ACS allowing arbitrary password change via SOAP request to the UCP service (SOAPAction changeUserPass).CWE-255

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation