EUVD-2016-8022

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR interface in the OS Administration component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of administrators for requests...

CVE-2014-0740

CVE-2014-0740 is a CSRF vulnerability in the Cisco Unified Communications Manager (Unified CM) OS Administration interface, specifically in the Call Detail Records Analysis and Reporting (CAR) web UI. Affected versions are Unified CM 10.0(1) and earlier. The root cause is insufficient CSRF protec...

Cisco Unified Communications Manager OS Administration CSRF Vulnerability

A vulnerability in the OS Administration page of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack against the OS Administration web interface. The vulnerability is due to insufficient CSRF...