CVE-2019-19866

ALTO 7.5CVE-2019-19866 · Published 21/02/2020 · updated 17/06/2026

In breve

CVE-2019-19866 è una vulnerabilità ALTO (CVSS 7.5) che riguarda unify openscape uc web client (atos).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
unify openscape uc web client atos	`= 10.0= 9.0`	No fix yet

Description

Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with their numbers and access PINs.

References

networks.unify.com/security/advisories/OBSO-2002-01.pdf · Vendor Advisory
unify.com/en/support/security-advisories · Vendor Advisory

Altre vulnerabilità di unify openscape uc web client

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free