Low WID-SEC-2024-2062 1 CVE

Cisco Expressway: Schwachstelle ermöglicht Darstellen falscher Informationen

Published Sep 4, 2024 · Updated Sep 4, 2024 · de-DE

Vendor: Cisco Product: Expressway

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Expressway ausnutzen, um falsche Informationen darzustellen.

Product

Cisco Expressway ermöglicht die Nutzung verschiedener Intranetdienste aus dem Internet, ohne ein VPN zu benötigen.

Vulnerabilities 1

Medium 4.3

CVE-2024-20497

Cisco Expressway Edge Improper Authorization Vulnerability

A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. A…

Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices

Sep 4, 2024

Revision history

2024-09-04 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-09-04
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-auth-kdFrcZ2j