PT-2014-4544
CVE-2014-2190
·
Publicado
2014-05-07
·
Atualizado
2015-08-13
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Broadcast Access Center for Telco and Wireless (BAC-TW) (affected versions not specified)
Description
A cross-site request forgery (CSRF) issue in the web framework of Cisco BAC-TW allows remote attackers to hijack the authentication of arbitrary users for requests that make changes to BAC-TW.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾