Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability (cisco-sa-20151120-tvcs)

A vulnerability in Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to execute unwanted actions. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2015-6376

CVE-2015-6376 affects Cisco TelePresence Video Communication Server (VCS) X8.5.1 and is a cross-site request forgery (CSRF/XSRF) vulnerability that could allow an unauthenticated remote attacker to hijack user authentication. The root cause is lack of CSRF protections. Public references indicate ...