CVEvulnerability
CVE-2013-3472
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications Manager (CM) allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210.
Affected configurations
• cisco unified communications manager
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3472 Vendor Advisory
- http://www.securitytracker.com/id/1028963 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3472 Vendor Advisory
- http://www.securitytracker.com/id/1028963 Third Party Advisory, VDB Entry