Cisco Unified Communications Manager CVE-2013-3397 Cross Site Request Forgery Vulnerability

Bugtraq ID:	60822
Class:	Input Validation Error
CVE:	CVE-2013-3397
Remote:	Yes
Local:	No
Published:	Jun 26 2013 12:00AM
Updated:	Jun 26 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Unified Communications Manager 9.1(1) Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5
Not Vulnerable:

Cisco Unified Communications Manager CVE-2013-3397 Cross Site Request Forgery Vulnerability

Cisco Unified Communications Manager is prone to a cross-site request-forgery vulnerability.

Attackers can exploit this issue to perform certain administrative actions and to gain unauthorized access to the affected application.

This issue being tracked by Cisco bug ID CSCuh10298.

Cisco Unified Communications Manager 9.1(1) and prior are vulnerable.

Cisco Unified Communications Manager CVE-2013-3397 Cross Site Request Forgery Vulnerability

To exploit the issue an attacker must entice a user into visiting a malicious site.

Cisco Unified Communications Manager CVE-2013-3397 Cross Site Request Forgery Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Unified Communications Manager Unified Serviceability CSRF Vulnerability (Cisco)