Boletines de Vulnerabilidades

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability


Información sobre el sistema

   
Software afectado Cisco

Descripción

A vulnerability in the web interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web interface.The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by persuading a user of an affected system to follow a crafted link or visit an attacker-controlled website. A successful exploit could allow an attacker to submit arbitrary

More info:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-pca1?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Prime%20Collaboration%20Assurance%20Cross-Site%20Request%20Forgery%20

Identificadores estándar

Propiedad Valor
CVE CVE-2015-6330.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-11-17

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT