CVE-2009-0056

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6…

published January 16, 2009

CVSS
—
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to execute commands and modify appliance preferences as arbitrary users via a logout action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00547 · 45.1th percentile
Published
2009-01-16T21:00Z
EPSS history
Timeline
  • 16 JAN 21:00Z
    Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6…
    cvelistv5