CVE-2019-10689

Опубликовано: 24 июн. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 3.3

EPSS Низкий

Описание

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information.

Ссылки

http://www.securityfocus.com/bid/108799
Third Party Advisory
VDB Entry
https://support.polycom.com/content/dam/polycom-support/global/documentation/insufficient-authentication-leakage-vvx-products.pdf
Vendor Advisory
http://www.securityfocus.com/bid/108799
Third Party Advisory
VDB Entry
https://support.polycom.com/content/dam/polycom-support/global/documentation/insufficient-authentication-leakage-vvx-products.pdf
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:polycom:better_together_over_ethernet_connector:*:*:*:*:*:*:*:*

Версия до 3.9.1 (включая)

cpe:2.3:a:polycom:unified_communications_software:*:*:*:*:*:*:*:*

Версия до 5.9.2 (включая)

EPSS

Процентиль: 56%

0.00333

Низкий

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-w826-3wv8-4hp7