Cisco WebEx Node for Media Convergence Server Redirect privilege escalation : 8/20/2015 6:08:49 AM
 | Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >> From our sponsors  |
| Vulnerability Advisories |
| Vulnerabilities of scip VulDB |
Cisco WebEx Node for Media Convergence Server Redirect privilege escalation
8/18/2015 7:00:00 PM
General
scipID: 77332
Affected: Cisco WebEx Node for Media Convergence Server
Published: 08/19/2015
Risk: critical
Created: 08/20/2015
Entry: 65.8% complete
Summary
A vulnerability has been found in Cisco WebEx Node for Media Convergence Server (the affected version is unknown) and classified as critical. This vulnerability affects an unknown function. The manipulation with an unknown input leads to a privilege escalation vulnerability (redirect). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:
Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136.
The weakness was disclosed 08/19/2015 as CSCuv32136 as advisory (Website). This vulnerability was named CVE-2015-4297. The attack can be initiated remotely. There are neither technical details nor an exploit publicly available.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
CVSS
Base Score: 6.0 (CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P) [?]
Temp Score: 6.0 (CVSS2#E:ND/RL:ND/RC:ND) [?]
CPE
Exploiting
Class: Privilege escalation
Local: No
Remote: Yes
Availability: No
Countermeasures
Recommended: no mitigation known
0-Day Time: 0 days since found
Timeline
08/19/2015 | Advisory disclosed
08/20/2015 | VulDB entry created
08/20/2015 | VulDB entry updated
Sources
Advisory: CSCuv32136
CVE: CVE-2015-4297 (mitre.org) (nvd.nist.org) (cvedetails.com)
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions
