Vulnerability in Cisco Unified Meetingplace
CVE-2010-0140
Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 and CSCtd40661.
EPSS: 0.026 (83.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_meetingplace — versions 7.0, 7.0.1, 5.3
- N/a — versions n/a
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)