Описание
The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:7.0.2:mr1:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:7.0.3:mr2:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:7.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:7.1:mr1:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:cisco:unified_meetingplace:8.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:8.0:mr1:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:a:cisco:unified_meetingplace:8.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:8.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:8.5.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace:8.5.3:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01075
Низкий
7.6 High
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
github
больше 3 лет назад
The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885.
EPSS
Процентиль: 77%
0.01075
Низкий
7.6 High
CVSS2
Дефекты
NVD-CWE-noinfo