Vulnerability Bulletins |
Cisco Unity Connection Cross-Site Request Forgery Vulnerability |
|
| Affected software | Cisco |
|
A cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection could allow an unauthenticated, remote attacker to execute unwanted actions.The vulnerability is due to a lack of CSRF protections by an affected device. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to submit arbitrary requests to the affected device via the web browser with the privileges of the user.Cisco has not released More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-uc?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Request%20Forgery%20Vulnerability&vs_ |
|