CVE-2019-19866

 

Published at: - 21-02-2020 05:15

Last modified: - 18-04-2022 05:57

Total changes: - 3

Description

Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with their numbers and access PINs.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://networks.unify.com/security/advisories/OBSO-2002-01.pdf
• https://unify.com/en/support/security-advisories

 

Keywords

NVD

 

CVE-2019-19866

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures