Lucene search
CiscoCVE-2015-6304HistorySep 24, 2015 - 2:59 p.m.
CVE-2015-6304
2015-09-2414:59:01
CWE-352
cisco
web.nvd.nist.gov
27
cve-2015-6304
csrf
cisco telepresence server
vulnerability
remote attackers
authentication
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
32.7%
Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Server software 3.0(2.24) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760.
Affected configurations
Node
ciscotelepresence_server_softwareMatch3.0\(2.24\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | telepresence_server_software | 3.0(2.24) | cpe:2.3:a:cisco:telepresence_server_software:3.0\(2.24\):*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-6304
2015-09-24 14:00:00
cisco
cisco
Cisco TelePresence Server Cross-Site Request Forgery Vulnerability
2015-09-22 20:05:54
prion
prion
Cross site request forgery (csrf)
2015-09-24 14:59:00
nvd
nvd
CVE-2015-6304
2015-09-24 14:59:01
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
32.7%
Related for CVE-2015-6304