Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote malicious users to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cisco wireless_lan_controller_software 7.2.110.0 |
||
cisco 2500_wireless_lan_controller - |
||
cisco 4100_wireless_lan_controller |
||
cisco 4400_wireless_lan_controller |
||
cisco 5500_wireless_lan_controller - |
||
cisco 2100_wireless_lan_controller |
||
cisco 7500_wireless_lan_controller - |
||
cisco 2000_wireless_lan_controller |
||
cisco 8500_wireless_lan_controller - |