CVE-2009-0614
Published Feb 26, 2009
Last updated 6 years ago
Overview
- Description
- Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9
- Impact score
- 8.5
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:C
Weaknesses
- nvd@nist.gov
- CWE-287
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F3658DA-A276-44AD-A3CB-E1CB86ED7F88",
"versionEndExcluding": "6.0\\(517.0\\)",
"versionStartIncluding": "6.0\\(171\\)"
},
{
"criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81EA2062-D903-4A88-B8D3-899221F69924",
"versionEndExcluding": "7.0\\(2\\)",
"versionStartIncluding": "7.0\\(1\\)"
}
],
"operator": "OR"
}
]
}
]