CVE-2015-4242: cisco firesight_system_software Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2015-4242 is a medium (CVSS 6.8) Cross-Site Request Forgery (CSRF) vulnerability in cisco firesight_system_software. EPSS estimates a 0.99% chance of exploitation in the next 30 days, higher than 61.9% of scored vulnerabilities.

Timeline

1. 08-07-2015
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721.

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.