Lucene search

CiscoCVE-2016-6442

HistoryOct 27, 2016 - 9:59 p.m.

CVE-2016-6442

2016-10-2721:59:13

CWE-352

cisco

web.nvd.nist.gov

cisco

finesse

agent

supervisor

desktop

software

vulnerability

csrf

attack

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the web interface. More Information: CSCvb57213. Known Affected Releases: 11.0(1).

Affected configurations

Nvd

Node

ciscofinesseMatch11.0\(1\)_base

VendorProductVersionCPE
ciscofinesse11.0%281%29+basecpe:/a:cisco:finesse:11.0%281%29+base:::

Vendor	Product	Version	CPE
cisco	finesse	11.0%281%29+base	cpe:/a:cisco:finesse:11.0%281%29+base:::

CNA Affected

[
  {
    "product": "Cisco Finesse 11.0(1)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Finesse 11.0(1)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/93519

www.securitytracker.com/id/1037004

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-fin

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Related for CVE-2016-6442