CSRF in Cisco Unified Meetingplace
CVE-2013-5494
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.008 (54.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_meetingplace
- Cisco Unified_meetingplace_web_conferencing
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)