CVEvulnerability
CVE-2009-0614
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
- Weaknesses
- CWE-287
Description
Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.
Affected configurations
• cisco unified meetingplace web conferencing (>= 6.0\(171\) < 6.0\(517.0\))
• cisco unified meetingplace web conferencing (>= 7.0\(1\) < 7.0\(2\))
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml Vendor Advisory
- http://www.securityfocus.com/bid/33901 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48888 VDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml Vendor Advisory
- http://www.securityfocus.com/bid/33901 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48888 VDB Entry