CSRF in Cisco Hosted_collaboration_solution
CVE-2015-0741
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.001 (30.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Hosted_collaboration_solution
- N/a — versions n/a
Weakness classification (CWE)
References
- 20150520 Cisco Prime Central for HCS Multiple Cross-Site Request Forgery Vulnerabilities (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- 1032380 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
- 74754 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)