CVE-2015-0747

Published May 30, 2015

Last updated 3 months ago

Overview

Description
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
Source
ykramarz@cisco.com
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
4.3
Impact score
2.9
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-20

Social media

Hype score
Not currently trending

Configurations