CVEvulnerability
CVE-2014-7996
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477.
Affected configurations
• cisco unified computing system
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/62565 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7996 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36456 Vendor Advisory
- http://www.securityfocus.com/bid/71171 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98769 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/62565 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7996 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36456 Vendor Advisory
- http://www.securityfocus.com/bid/71171 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98769 exchange.xforce.ibmcloud.com