Cisco Unified MeetingPlace CVE-2015-0705 Cross Site Request Forgery Vulnerability
BID:74258
Info
Cisco Unified MeetingPlace CVE-2015-0705 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 74258 |
| Class: | Design Error |
| CVE: |
CVE-2015-0705 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 21 2015 12:00AM |
| Updated: | Jul 05 2016 10:35PM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Unified MeetingPlace CVE-2015-0705 Cross Site Request Forgery Vulnerability
Cisco Unified MeetingPlace is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
This issue is being tracked by Cisco Bug ID CSCus97494.
Cisco Unified MeetingPlace is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
This issue is being tracked by Cisco Bug ID CSCus97494.
Exploit / POC
Cisco Unified MeetingPlace CVE-2015-0705 Cross Site Request Forgery Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
Cisco Unified MeetingPlace CVE-2015-0705 Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Unified MeetingPlace CVE-2015-0705 Cross Site Request Forgery Vulnerability
References:
References:
- Cisco Homepage (Cisco )