Cisco WebEx Meetings Server 跨站请求伪造漏洞(CVE-2016-1448)
Cisco WebEx Meetings Server 跨站请求伪造漏洞(CVE-2016-1448)
Cisco WebEx Meetings Server 跨站请求伪造漏洞(CVE-2016-1448)
发布日期:2016-07-14
更新日期:2016-07-18
受影响系统:
Cisco WebEx Meeting Center 2.7
描述:
CVE(CAN) ID: CVE-2016-1448
Cisco WebEx Meetings是网络会议解决方案。
Cisco WebEx Meetings Server 2.7在CSRF保护的实现上存在跨站请求伪造漏洞。远程攻击者利用此漏洞可劫持任意用户的身份验证。
<*来源:Cisco
链接:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms2
*>
建议:
厂商补丁:
Cisco
-----
Cisco已经为此发布了一个安全公告(cisco-sa-20160714-wms2)以及相应补丁:
cisco-sa-20160714-wms2:Cisco WebEx Meetings Server Administrator Interface Cross-Site Request Forgery Vulnerability
链接:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms2
本文永久更新链接地址:
评论暂时关闭