CVE-2013-3397

2013-06-2621:00:00

cisco

www.cve.org

cve-2013-3397

cross-site request forgery

unified serviceability component

cisco unified communications manager

remote attackers

authentication hijacking

bug id cscuh10298

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

35.9%

JSON

Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager (CUCM) allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3397