CVE-2015-0741 Cross-site request forgery in n/a
Remote attackers can hijack user authentication via CSRF in Cisco Prime Central for Hosted Collaboration Solution, requiring user interaction.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2015-0741?
CVE-2015-0741 is a medium-severity vulnerability in n/a, published on 21 May 2015. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.
Weakness: CWE-352
Which versions are affected by CVE-2015-0741?
It affects 1 product.
Products include Cisco Hosted Collaboration Solution.
How do I fix CVE-2015-0741?
No fix has been published for CVE-2015-0741 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-0741 being exploited?
There is no known exploitation of CVE-2015-0741 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2015-0750 Command injection in n/a
- CVE-2018-0386 Cross-site scripting in Unified Communications Domain Manager Software
- CVE-2019-15968 Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability
- CVE-2019-1911 Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability
- CVE-2014-2121 Denial of service in n/a
Sources
Also known as GHSA-9xw5-w2cf-cxfp.