PT-2015-4856 · Cisco · Cisco Prime Central For Hosted Collaboration Solution

Publicado 2015-05-21 · Atualizado 2017-01-06 · CVE-2015-0741

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) versions 10.6(1) and earlier

Description The issue allows remote attackers to hijack the authentication of arbitrary users due to multiple cross-site request forgery (CSRF) vulnerabilities.

Recommendations For versions 10.6(1) and earlier, update to a version later than 10.6(1) to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-0741

Produtos afetados

Cisco Prime Central For Hosted Collaboration Solution

Referências · 4

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38927 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0741 · Nota de Segurança
• http://securityfocus.com/bid/74754 · Nota
• http://securitytracker.com/id/1032380 · Nota