CVE-2015-0716 in Unity Connection
Summary
Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/07/2015
Disclosure
05/06/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75208 | Cisco Unity Connection CUCReports cross-site request forgery | 352 | Unproven | Official fix | CVE-2015-0716 |