Cisco Prime Central for HCS CVE-2015-0741 Multiple Cross Site Request Forgery Vulnerabilities

Bugtraq ID:	74754
Class:	Input Validation Error
CVE:	CVE-2015-0741
Remote:	Yes
Local:	No
Published:	May 20 2015 12:00AM
Updated:	Jul 06 2016 03:10PM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Prime Central for HCS CVE-2015-0741 Multiple Cross Site Request Forgery Vulnerabilities

Cisco Prime Central for HCS is prone to multiple cross-site request-forgery vulnerabilities.

Exploiting these issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected user. Other attacks are also possible.

These issues are being tracked by Cisco bug ID's CSCut04596, CSCuw95626 and CSCva27600.

Cisco Prime Central for HCS CVE-2015-0741 Multiple Cross Site Request Forgery Vulnerabilities

To exploit these issues an attacker must entice a user into visiting a malicious site.

Cisco Prime Central for HCS CVE-2015-0741 Multiple Cross Site Request Forgery Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Prime Central for HCS CVE-2015-0741 Multiple Cross Site Request Forgery Vulnerabilities

References:

• Cisco Homepage (Cisco )