CVE-2013-1120
Summary
| CVE | CVE-2013-1120 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-02-06 12:05:00 UTC |
| Updated | 2013-02-07 05:00:00 UTC |
| Description | Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910. |
Risk And Classification
Problem Types: CWE-352
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Unity Express | All | All | All | All |
| Hardware | Cisco | Unity Express | All | All | All | All |
| Application | Cisco | Unity Express Software | 1.1.1 | All | All | All |
| Application | Cisco | Unity Express Software | 1.1.2 | All | All | All |
| Application | Cisco | Unity Express Software | 2.0 | All | All | All |
| Application | Cisco | Unity Express Software | 2.1 | All | All | All |
| Application | Cisco | Unity Express Software | 2.2 | All | All | All |
| Application | Cisco | Unity Express Software | 2.3 | All | All | All |
| Application | Cisco | Unity Express Software | 3.0 | All | All | All |
| Application | Cisco | Unity Express Software | 3.1 | All | All | All |
| Application | Cisco | Unity Express Software | 3.2 | All | All | All |
| Application | Cisco | Unity Express Software | 7.0 | All | All | All |
| Application | Cisco | Unity Express Software | 7.1 | All | All | All |
| Application | Cisco | Unity Express Software | 7.2 | All | All | All |
| Application | Cisco | Unity Express Software | 7.3 | All | All | All |
| Application | Cisco | Unity Express Software | 1.1.1 | All | All | All |
| Application | Cisco | Unity Express Software | 1.1.2 | All | All | All |
| Application | Cisco | Unity Express Software | 2.0 | All | All | All |
| Application | Cisco | Unity Express Software | 2.1 | All | All | All |
| Application | Cisco | Unity Express Software | 2.2 | All | All | All |
| Application | Cisco | Unity Express Software | 2.3 | All | All | All |
| Application | Cisco | Unity Express Software | 3.0 | All | All | All |
| Application | Cisco | Unity Express Software | 3.1 | All | All | All |
| Application | Cisco | Unity Express Software | 3.2 | All | All | All |
| Application | Cisco | Unity Express Software | 7.0 | All | All | All |
| Application | Cisco | Unity Express Software | 7.1 | All | All | All |
| Application | Cisco | Unity Express Software | 7.2 | All | All | All |
| Application | Cisco | Unity Express Software | 7.3 | All | All | All |
| Application | Cisco | Unity Express Software | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Security Notice: Cisco Unity Express Cross Site Request Forgery Vulnerabilities | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.