CVE-2015-6262

Cross-site request forgery CSRF vulnerability in Cisco Prime Infrastructure 1.20.103 and 2.00.0 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 and CSCum49059...

CVE-2015-6262

CVE-2015-6262 describes a cross-site request forgery vulnerability in Cisco Prime Infrastructure (versions 1.2(0.103) and 2.0(0.0)) that could allow remote attackers to hijack a user’s session. Root cause: insufficient CSRF protections in the web interface. Exploitation involves luring a user to ...