CVE-2010-0140 Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) ad...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 and CSCtd40661.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified meetingplace | = 5.2 | No fix listed |
| cisco unified meetingplace | = 5.3 | No fix listed |
| cisco unified meetingplace | = 5.4 | No fix listed |
| cisco unified meetingplace | = 6.0 | No fix listed |
| cisco unified meetingplace | = 7.0 | No fix listed |
| cisco unified meetingplace | = 7.0.1 | No fix listed |
| cisco unified meetingplace | = 7.0.2 | No fix listed |
References
- 20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace patch vendor-advisory
- 37965 vdb-entry