CVE-2014-3267

CVE-2014-3267 is a CSRF vulnerability in Cisco Security Manager’s web framework (4.6 and earlier) that lets an unauthenticated, remote attacker perform actions in the context of an authenticated user by crafting requests that make unspecified changes. The issue arises from insufficient CSRF prote...