CVE-2014-7996

2014-11-1823:00:00

cisco

www.cve.org

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

58.4%

JSON

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477.

References

secunia.com/advisories/62565

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7996

tools.cisco.com/security/center/viewAlert.x?alertId=36456

www.securityfocus.com/bid/71171

exchange.xforce.ibmcloud.com/vulnerabilities/98769