CSRF in Cisco Data Center Analytics Framework

CVE-2015-4189

Cross-site request forgery (CSRF) vulnerability in Cisco Data Center Analytics Framework (DCAF) 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (44.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Data_center_analytics_framework — versions 1.4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)