CVEvulnerability
CVE-2013-5494
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-09-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674.
Affected configurations
• cisco unified meetingplace
• cisco unified meetingplace web conferencing
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5494 Vendor Advisory
- http://www.securitytracker.com/id/1029037 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5494 Vendor Advisory
- http://www.securitytracker.com/id/1029037 www.securitytracker.com