← All CVEs

CVE-2011-0951

medium · 5

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

5
CVSS
14.6%
EPSS (exploit prob.)
96th
EPSS percentile
2011-04-04
Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

CWE-255

Affected products

VendorProductAffected versions
ciscosecure_access_control_system5.1
ciscosecure_access_control_system5.1.0.44
ciscosecure_access_control_system5.1.0.44.1
ciscosecure_access_control_system5.1.0.44.2
ciscosecure_access_control_system5.1.0.44.3
ciscosecure_access_control_system5.1.0.44.4
ciscosecure_access_control_system5.1.0.44.5
ciscosecure_access_control_system5.2
ciscosecure_access_control_system5.2.0.26
ciscosecure_access_control_system5.2.0.26.1
ciscosecure_access_control_system5.2.0.26.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-0951