CVE-2015-0697

Опубликовано: 15 апр. 2015

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.

Ссылки

http://tools.cisco.com/security/center/viewAlert.x?alertId=38350
Vendor Advisory
http://www.securitytracker.com/id/1032136
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=38350
Vendor Advisory
http://www.securitytracker.com/id/1032136
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:telepresence_tc_software:6.0.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.0.0-cucm:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.0.1:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.0.1-cucm:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.0.2:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.0_base:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.1.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.1.0-cucm:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.1.1:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.1.1-cucm:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.1.2:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.1.2-cucm:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.1_base:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:6.3_base:*:*:*:*:*:*:*

cpe:2.3:o:cisco:telepresence_tc_software:7.2_base:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00206

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-q74v-5rv8-9qjj

github

больше 3 лет назад