CVE-2014-0736: CSRF
Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug ID CSCum46468.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0736?
CVE-2014-0736 has a high severity rating due to its potential for exploitation via cross-site request forgery.
How do I fix CVE-2014-0736?
To fix CVE-2014-0736, update your Cisco Unified Communications Manager to a version that is not vulnerable.
What versions are affected by CVE-2014-0736?
CVE-2014-0736 affects Cisco Unified Communications Manager versions up to and including 10.0(1) and several earlier versions.
What kind of attack does CVE-2014-0736 facilitate?
CVE-2014-0736 facilitates cross-site request forgery attacks, allowing unauthorized modifications on the CAR page.
Is there a workaround for CVE-2014-0736?
Currently, there are no specific workarounds for CVE-2014-0736 other than applying the recommended updates.