Lucene search

PRIOn knowledge basePRION:CVE-2011-2544

HistorySep 23, 2011 - 10:55 a.m.

Cross site request forgery (csrf)

2011-09-2310:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.7%

JSON

Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.

CPENameOperatorVersion
telepresence_mxp_softwareeq<= f9.1
telepresence_mxp_softwareeq8.2.102
telepresence_mxp_softwareeq9.0.102
telepresence_mxp_softwareeq9.0.1102
telepresence_mxp_softwareeq9.0.2102

Name	Operator	Version
telepresence_mxp_software	eq	<= f9.1
telepresence_mxp_software	eq	8.2.102
telepresence_mxp_software	eq	9.0.102
telepresence_mxp_software	eq	9.0.1102
telepresence_mxp_software	eq	9.0.2102

References

secunia.com/advisories/46057

secunia.com/advisories/46109

securityreason.com/securityalert/8393

securitytracker.com/id?1026072

www.securityfocus.com/archive/1/519698/100/0/threaded

www.securityfocus.com/bid/49670

exchange.xforce.ibmcloud.com/vulnerabilities/69906

www.exploit-db.com/exploits/17871

6.5 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.7%

JSON

Related for PRION:CVE-2011-2544