CVE-2014-3267

Published: May 26, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427.

Affected (18)

Products: Cisco: Security Manager

Cisco

1 product

Security Manager

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Cisco Security Manager	Up to 4.6
Cisco Security Manager	Version 4.0.1
Cisco Security Manager	Version 4.0.1 sp1
Cisco Security Manager	Version 4.0.1 sp2
Cisco Security Manager	Version 4.0
Cisco Security Manager	Version 4.0 sp1
Cisco Security Manager	Version 4.1
Cisco Security Manager	Version 4.1 sp1
Cisco Security Manager	Version 4.1 sp2
Cisco Security Manager	Version 4.2
Cisco Security Manager	Version 4.2 sp1
Cisco Security Manager	Version 4.3
Cisco Security Manager	Version 4.3 sp1
Cisco Security Manager	Version 4.3 sp2
Cisco Security Manager	Version 4.4
Cisco Security Manager	Version 4.4 sp1
Cisco Security Manager	Version 4.4 sp2
Cisco Security Manager	Version 4.5