Auth bypass in Cisco Unified Meetingplace Web Conferencing
CVE-2009-0614
Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.
Vulnerability class: Broken Authentication
EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_meetingplace_web_conferencing
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (VDB Entry, vdb-entry, x_refsource_XF)