CVE-2010-0141 — Sensitive Information Exposure in Cisco Unified Meetingplace

CWE-255CWE-200 — Sensitive Information ExposureCWE-264CWE-287 — Improper Authentication4 documents4 sources
Severity
6.4MEDIUMNVD
EPSS
0.3%
top 49.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Meetingplace
Timeline
PublishedJan 28
Latest updateMay 2

Description

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

▶NVDcisco/unified_meetingplace6.0, 6.0.170.0, 6.0.244+2

Patches

Patch: www.cisco.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-67cg-hqpj-xmm9: MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified othe↗2022-05-02
▶
CVEList
CVE-2010-0141: MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified othe↗2010-01-28
▶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in Cisco Unified MeetingPlace↗2010-01-27
▶
CVE-2010-0141 — Sensitive Information Exposure in Cisco | cvebase