Description
The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.
References
- 1029668 vdb-entry
- 102342 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32516
- cisco-mediasense-cve20140672-info-disc(90616) vdb-entry
- 56600 third-party-advisory
- 65054 vdb-entry
- 20140121 Cisco MediaSense Search and Play Authorization Vulnerability vendor-advisory