CVE-2016-6444

Published: Oct 27, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0.

Affected (9)

Products: Cisco: Meeting Server

Cisco

1 product

Meeting Server

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Meeting Server	Version 1.8.15
Cisco Meeting Server	Version 1.8_base
Cisco Meeting Server	Version 1.9.0
Cisco Meeting Server	Version 1.9.2
Cisco Meeting Server	Version 2.0.0
Cisco Meeting Server	Version 2.0.1
Cisco Meeting Server	Version 2.0.3
Cisco Meeting Server	Version 2.0.4
Cisco Meeting Server	Version 2.0.5

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (4)

http://www.securityfocus.com/bid/93785

Source: psirt@cisco.com

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/93785

Source: af854a3a-2127-422b-91ae-364da2661108

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.