PT-2016-6918
CVE-2016-6445
·
تاريخ النشر
2016-10-27
·
تاريخ التحديث
2017-07-30
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Meeting Server versions prior to 2.0.6
Acano Server versions prior to 1.8.18
Acano Server versions 1.9.x prior to 1.9.6
Description
The issue arises from the incorrect processing of a deprecated authentication scheme by the Extensible Messaging and Presence Protocol (XMPP) service. This could allow an unauthenticated, remote attacker to masquerade as a legitimate user, potentially gaining access to the system as another user.
Recommendations
For Cisco Meeting Server versions prior to 2.0.6, update to version 2.0.6 or later.
For Acano Server versions prior to 1.8.18, update to version 1.8.18 or later.
For Acano Server versions 1.9.x prior to 1.9.6, update to version 1.9.6 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾