Unscored CVE-2007-1062 EUVD-2007-1059GHSA-5vv7-4p3j-cg3r

The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrat…

Published Feb 22, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time

References

20070221 Identifying and Mitigating Exploitation of Cisco Unified IP Conference Station and IP Phone Vulnerabilities vendor-advisory
20070221 Cisco Unified IP Conference Station and IP Phone Vulnerabilities vendor-advisory
24262 third-party-advisory
1017680 vdb-entry
22647 vdb-entry
45245 vdb-entry
ADV-2007-0688 vdb-entry
cisco-unified-ip-conference-url-auth-bypass(32623) vdb-entry