CVE-2017-3877

Опубликовано: 17 мар. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected Releases: 11.5(1.11007.2).

Ссылки

http://www.securityfocus.com/bid/96915
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038038
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm2
VDB Entry
http://www.securityfocus.com/bid/96915
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038038
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm2
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:unified_communications_manager:11.5\(1.11.007.2\):*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00142

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-76x7-mpx3-h3rw

CVSS3: 6.5

github

больше 3 лет назад

BDU:2017-00683

fstec

почти 9 лет назад

Уязвимость системы управления IP-телефонией Cisco Unified Communications Manager, позволяющая нарушителю нарушить целостность данных