PT-2015-7230 · Cisco · Cisco Emergency Responder
CVE-2015-6405
·
Published
2015-12-13
·
Updated
2016-12-07
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Cisco Emergency Responder versions 10.5(1) through 10.5(1a)
Description
A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users.
Recommendations
For versions 10.5(1) and 10.5(1a), update to a version that fixes the Bug ID CSCuv26501 issue to prevent remote attackers from hijacking user authentication.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Emergency Responder