Description
The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoom_Remoting.authenticate function in gateway.php.
References
- 49330 vdb-entry
- lifesize-room-security-bypass(69445) vdb-entry
- 20110828 LifeSize Room Vulnerabilities mailing-list
- VU#213486 third-party-advisory
- 8364 third-party-advisory
- http://www.securestate.com/Documents/LifeSize_Room_Advisory.txt