Cisco Unified Communications Manager CVE-2013-3472 Cross Site Request Forgery Vulnerability

Bugtraq ID:	62032
Class:	Input Validation Error
CVE:	CVE-2013-3472
Remote:	Yes
Local:	No
Published:	Aug 28 2013 12:00AM
Updated:	Nov 15 2013 12:54AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Communications Manager CVE-2013-3472 Cross Site Request Forgery Vulnerability

Cisco Unified Communications Manager is prone to a cross-site request-forgery vulnerability.

Attackers can exploit this issue to perform certain administrative actions and to gain unauthorized access to the affected application.

This issue is being tracked by Cisco bug IDs CSCui58210 and CSCul33890.

Cisco Unified Communications Manager CVE-2013-3472 Cross Site Request Forgery Vulnerability

To exploit the issue an attacker must entice a user into visiting a malicious site.

Cisco Unified Communications Manager CVE-2013-3472 Cross Site Request Forgery Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager CVE-2013-3472 Cross Site Request Forgery Vulnerability

References:

• Cisco Homepage (Cisco )