CVEvulnerability
CVE-2014-2115
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250.
Affected configurations
• cisco emergency responder (<= 8.6)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2115 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33643 Vendor Advisory
- http://www.securityfocus.com/bid/66631 www.securityfocus.com
- http://www.securitytracker.com/id/1030019 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2115 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33643 Vendor Advisory
- http://www.securityfocus.com/bid/66631 www.securityfocus.com
- http://www.securitytracker.com/id/1030019 www.securitytracker.com