Cisco Unified Communications Domain Manager CVE-2015-0588 Cross Site Request Forgery Vulnerability

Bugtraq ID:	72082
Class:	Design Error
CVE:	CVE-2015-0588
Remote:	Yes
Local:	No
Published:	Jan 15 2015 12:00AM
Updated:	Feb 04 2015 12:03AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Communications Domain Manager CVE-2015-0588 Cross Site Request Forgery Vulnerability

Cisco Unified Communications Domain Manager is prone to a cross-site request-forgery vulnerability because it fails to sufficiently implement the CSRF protection.

An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.

This issue is being tracked by Cisco Bug ID CSCuo77055.

Cisco Unified Communications Domain Manager CVE-2015-0588 Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

Cisco Unified Communications Domain Manager CVE-2015-0588 Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Communications Domain Manager CVE-2015-0588 Cross Site Request Forgery Vulnerability

References:

• Cisco Homepage (Cisco )