Unscored CVE-2014-2193 EUVD-2014-2233GHSA-qp2p-gxc5-fcfh

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conver…

Published May 20, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

References

20140519 Cisco Unified Web and E-Mail Interaction Manager Broken Authentication Vulnerability vendor-advisory