Vulnerability in Cisco Unified Meetingplace

CVE-2010-0141

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935.

EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_meetingplace — versions 6.0.170.0, 6.0.244, 6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)