Описание
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530.
Комментарий
Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml
Affected Products Vulnerable Products
Cisco Unified MeetingPlace versions 5, 6, and 7 are each affected by at least one of the vulnerabilities described in this document.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cisco:unified_meetingplace:5.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:5.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:5.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00459
Низкий
8.5 High
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
почти 4 года назад
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530.
EPSS
Процентиль: 64%
0.00459
Низкий
8.5 High
CVSS2
Дефекты
CWE-264