Cisco MediaSense Cross-Site Request Forgery (CVE-2015-0736)

Cisco MediaSense Cross-Site Request Forgery (CVE-2015-0736)
Cisco MediaSense Cross-Site Request Forgery (CVE-2015-0736)

Release date:
Updated on:

Affected Systems:

Cisco MediaSense 10.5 (1)

Description:

Bugtraq id: 74671
CVE (CAN) ID: CVE-2015-0736

Cisco MediaSenseis is a Unified Communication product and media capturing platform.

The Cross-Site Request Forgery vulnerability exists in Cisco MediaSense 10.5 (1) and earlier versions. Remote attackers can exploit this vulnerability to hijack the authentication of arbitrary users.

<* Source: Cisco
*>

Suggestion:

Vendor patch:

Cisco
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://tools.cisco.com/security/center/viewAlert.x? AlertId = 38869

This article permanently updates the link address: