Lucene search
HistoryFeb 15, 2013 - 12:09 p.m.
CVE-2013-1128
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.002
Percentile
52.5%
Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
ciscounified_meetingplaceRange≤7.1
ORciscounified_meetingplaceMatch5.4
ORciscounified_meetingplaceMatch6.0
ORciscounified_meetingplaceMatch6.1
ORciscounified_meetingplaceMatch7.0
ORciscounified_meetingplaceMatch7.0.1
ORciscounified_meetingplaceMatch7.0.2
ORciscounified_meetingplaceMatch7.0.2mr1
ORciscounified_meetingplaceMatch7.0.3
ORciscounified_meetingplaceMatch7.0.3mr2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_meetingplace | * | cpe:2.3:a:cisco:unified_meetingplace:*:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 5.4 | cpe:2.3:a:cisco:unified_meetingplace:5.4:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 6.0 | cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 6.1 | cpe:2.3:a:cisco:unified_meetingplace:6.1:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 7.0 | cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 7.0.1 | cpe:2.3:a:cisco:unified_meetingplace:7.0.1:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 7.0.2 | cpe:2.3:a:cisco:unified_meetingplace:7.0.2:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 7.0.2 | cpe:2.3:a:cisco:unified_meetingplace:7.0.2:mr1:*:*:*:*:*:* |
| cisco | unified_meetingplace | 7.0.3 | cpe:2.3:a:cisco:unified_meetingplace:7.0.3:*:*:*:*:*:*:* |
| cisco | unified_meetingplace | 7.0.3 | cpe:2.3:a:cisco:unified_meetingplace:7.0.3:mr2:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-1128
2013-02-15 11:00:00
prion
prion
Cross site request forgery (csrf)
2013-02-15 12:09:00
cve
cve
CVE-2013-1128
2013-02-15 12:09:29
cisco
cisco
Cisco Unified MeetingPlace Server Cross-Site Request Forgery Vulnerability
2013-02-13 16:57:15
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.002
Percentile
52.5%
Related for NVD:CVE-2013-1128