Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h8jc-fxc6-j8gp

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.

The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.

EPSS

Процентиль: 90%
0.0571
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
почти 15 лет назад

The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.

EPSS

Процентиль: 90%
0.0571
Низкий

Дефекты

CWE-287