CVE-2013-3451 - Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033

Back Back to CVE browser

MEDIUM

Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033

Published Aug 3, 2013

6.8

MEDIUM

CVSS 2.0

EPSS 0.58%

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3451
vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3386
Advisory

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3451		vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3386		Advisory