Description
Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833.
References
- telepresence-xmlrpc-security-bypass(65609) vdb-entry
- 20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server vendor-advisory
- 1025114 vdb-entry
- 46522 vdb-entry