Unscored CVE-2015-0620 EUVD-2015-0633GHSA-53r8-8q43-v88g

The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows r…

Published Feb 18, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.

References

cisco-telepresence-cve20150620-dos(100924) vdb-entry
1031753 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=37491
20150216 Cisco TelePresence Management Suite XML Vulnerability vendor-advisory