Arbitrary Cookie Injection Vulnerability in Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release (Bug ID CSCuh25408)

Arbitrary Cookie Injection Vulnerability in Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release (Bug ID CSCuh25408)

CVE-2015-0747 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.

Learn more about our Web Application Penetration Testing UK.