CVE-2018-15438— Cisco Prime Collaboration Assurance 跨站请求伪造漏洞

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to use a web browser to perform arbitrary actions with the privileges of the user on an affected system.

N/A

跨站请求伪造(CSRF)

Cisco Prime Collaboration Assurance 跨站请求伪造漏洞

Cisco Prime Collaboration Assurance（PCA）是美国思科（Cisco）公司的一套企业协作网络管理解决方案。该方案支持通过统一管理控制台简化统一通信和视频协作网络的管理，以及快速部署通信站点等。 Cisco PCA中的基于Web的管理界面存在跨站请求伪造漏洞。远程攻击者可通过诱使用户点击恶意链接利用该漏洞使用用户的web浏览器，以用户的权限在受影响的系统上执行任意操作。

N/A

N/A