Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.11.40 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732...

CVE-2015-4254

CVE-2015-4254 affects Cisco TelePresence Advanced Media Gateway devices running software 1.1(1.40). A CSRF flaw could allow an unauthenticated remote attacker to hijack the authentication of arbitrary users via the device’s web interface. Cisco’s advisory indicates updates have been released to m...