CVE-2014-2115

Currently unrated

Key Information:

Vendor
Cisco
Status
Emergency Responder
Vendor
CVE Published:
4 April 2014

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1030019
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.