CVEvulnerability
CVE-2013-1128
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-02-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are obtained from third party information.
Affected configurations
• cisco unified meetingplace (<= 7.1)
• cisco unified meetingplace 5.4
• cisco unified meetingplace 6.0
• cisco unified meetingplace 6.1
• cisco unified meetingplace 7.0
• cisco unified meetingplace 7.0.1
• cisco unified meetingplace 7.0.2
• cisco unified meetingplace 7.0.3
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/52194 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1128 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=28217 Vendor Advisory
- http://secunia.com/advisories/52194 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1128 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=28217 Vendor Advisory