CVEvulnerability
CVE-2015-0716
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-05-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.
Affected configurations
• cisco unity connection 11.0\(0.98000.225\)
• cisco unity connection 11.0\(0.98000.332\)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38675 Vendor Advisory
- http://www.securitytracker.com/id/1032259 www.securitytracker.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38675 Vendor Advisory
- http://www.securitytracker.com/id/1032259 www.securitytracker.com