Unscored CVE-2015-0704 EUVD-2015-0717GHSA-rgpp-69xw-mj7q

Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to…

Published Apr 22, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884.

References

20150421 Cisco Unified MeetingPlace Server Multiple State Changing URL API Functionalities Cross-Site Request Forgery Vulnerability vendor-advisory
1032334 vdb-entry