CVE-2014-0740

State: Published
Severity: Not scored
Published: Feb 27, 2014
Updated: Aug 6, 2024
Reserved: Jan 2, 2014

Description

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to hijack the authentication of administrators for requests that make administrative changes, aka Bug ID CSCun00701.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=33049
20140225 Cisco Unified Communications Manager OS Administration CSRF Vulnerabilityvendor-advisory
1029843vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.