NetSight
IP …
medium6.8

CVE-2009-0055

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.…

Impact

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to modify appliance preferences as arbitrary users via unspecified vectors.

Affected products

VendorProductAffected versions
CiscoIronport Encryption Appliance
Versions 6.2.4, 6.2.4.1, 6.2.5, 6.2.6, 6.2.7, 6.2.7.1
CiscoIronport Postx
Versions 6.2.1, 6.2.2, 6.2.2.1, 6.2.2.2

Weakness classification

CWE-352

References