Description
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
References
- 1032447 vdb-entry
- 20150529 Cisco Conductor for Videoscape and Cisco Headend System Release HTTP Injection Vulnerability vendor-advisory