Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0697
Reference (s):
- CISCO:20150414 Cisco TelePresence Collaboration Desk and Room Endpoints HTML Redirect Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38350
- SECTRACK:1032136
- URL: http://www.securitytracker.com/id/1032136