Cisco Wireless LAN Controller（WLC）Software 跨站请求伪造漏洞

漏洞信息详情

Cisco Wireless LAN Controller（WLC）Software是美国思科（Cisco）公司的一套用于配置和管理WLC（无线局域网控制器）的软件。

Cisco WLC Software中基于Web的管理界面存在跨站请求伪造漏洞，该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-csrf

来源:www.cisco.com

链接:http://www.cisco.com/

来源:www.securityfocus.com

链接:http://www.securityfocus.com/bid/107998

来源:tools.cisco.com

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-cert-dos

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Cisco-Wireless-LAN-Controller-Cross-Site-Request-Forgery-29090

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/79298

来源:www.securityfocus.com

链接:https://www.securityfocus.com/bid/107998

来源:tools.cisco.com

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-csrf

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-1797

暂无