CVE-2015-6304

Cisco TelePresence Server Software 3.0(2.24) - Cross-Site Request Forgery

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Server software 3.0(2.24) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/viewAlert.x?alertId=41128

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033644

Scores

EPSS 0.0100

EPSS Percentile 58.5%

Details

CWE

CWE-352

Status published

Products (1)

cisco/telepresence_server_software 3.0\(2.24\)

Published Sep 24, 2015

Tracked Since Feb 18, 2026