CVE-2011-2762

Name of the Vulnerable Software and Affected Versions LifeSize Room appliance version 3.5.3

Description The issue allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoom Remoting.authenticate function in the "gateway.php" endpoint.

Recommendations For version 3.5.3, consider restricting access to the gateway.php endpoint until a patch is available. As a temporary workaround, disabling the LSRoom Remoting.authenticate function may help mitigate the risk of exploitation.