Cisco Prime Collaboration Provisioning tool 跨站请求伪造漏洞

漏洞信息详情

Cisco Prime Collaboration Provisioning tool是美国思科（Cisco）公司的一套基于Web的下一代通信服务工具。该工具对IP电话、语音邮件和统一通信环境提供IP通信服务功能。

Cisco Prime Collaboration Provisioning Tool中的Web UI Application存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权的操作。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt1

来源:BID

链接:https://www.securityfocus.com/bid/100112

来源:CONFIRM

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt1

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039061