CVE Daily

CVE-2015-0740

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Ce...

Medium CVSS 6.8

Overview

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.

CWE: CWE-352 Published: 2015-05-20T00:59:00.077
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.8 (MEDIUM)
  • Detected tags: csrf (tag impact: MODERATE)

Recommended actions:

  • CSRF tokens, SameSite=Strict for cookies, validate Origin/Referer.

Recommended tools

Tags