Cisco Unified Computing System CVE-2012-4084 Cross Site Request Forgery Vulnerability

Bugtraq ID:	62851
Class:	Input Validation Error
CVE:	CVE-2012-4084
Remote:	Yes
Local:	No
Published:	Oct 04 2013 12:00AM
Updated:	Oct 04 2013 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Computing System CVE-2012-4084 Cross Site Request Forgery Vulnerability

Cisco Unified Computing System is prone to a cross-site request-forgery vulnerability because the application does not properly validate HTTP requests.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected user. Other attacks are also possible.

This issue is being tracked by Cisco bug ID CSCtg20755.

Cisco Unified Computing System CVE-2012-4084 Cross Site Request Forgery Vulnerability

To exploit the issue an attacker must entice a user into visiting a malicious site.

Cisco Unified Computing System CVE-2012-4084 Cross Site Request Forgery Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Computing System CVE-2012-4084 Cross Site Request Forgery Vulnerability

References:

• Cisco Homepage (Cisco )