CVE-2014-3267

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427...

CVE-2014-3267

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427...

CVE-2014-3267

CVE-2014-3267 is a CSRF vulnerability in Cisco Security Manager’s web framework (4.6 and earlier) that lets an unauthenticated, remote attacker perform actions in the context of an authenticated user by crafting requests that make unspecified changes. The issue arises from insufficient CSRF prote...