CVE-2016-1316 in TelePresence Video Communication Server

Riassunto

di MITRE

Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 03/01/2016
• Divulgazione: 08/02/2016
• Moderazione: accettato
• Voce: VDB-80827
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.3 (NVD)
• EPSS: 0.01459
• KEV: no
• Attività: molto basso
• Settore: Government, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1316
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1316
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1316/