Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Meeting Management ausnutzen, um seine Privilegien zu erhöhen.
Product
Cisco Meeting Management ist ein Management-Tool für die On-Premises-Videokonferenzplattform "Cisco Meeting Server".
Vulnerabilities 1
-
Critical 9.9
Cisco Meeting Management Client-Server Privilege Escalation Vulnerability
A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced u…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-cmm-privesc-uy2Vf8pc vom 2025-01-22
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-privesc-uy2Vf8pc