CVE-2016-6427

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuy75036 and CSCuy81654...

CVE-2016-6427

The Cisco Unified Intelligence Center (CUIC) CSRF issue (CVE-2016-6427) is fixed in Cisco advisory cisco-sa-20161005-ucis3. Affected CUIC versions 8.5.4–9.1(1), as used with Unified Contact Center Express 10.0(1)–11.0(1), are vulnerable due to insufficient CSRF protections, potentially allowing a...