EUVD-2013-3386

Malware in sbrugna...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...

CVE-2013-3451

Cisco Unified Communications Manager (Unified CM) Web Page CSRF vulnerability (CVE-2013-3451) allows unauthenticated attackers to perform arbitrary operations by exploiting insufficient CSRF protections in the web interface. The root cause is CSRF protection gaps that let a user’s browser submit ...