漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XMPP service incorrectly processing a deprecated authentication scheme. A successful exploit could allow an attacker to access the system as another user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Meeting Server 身份验证绕过漏洞
Vulnerability Description
Cisco Meeting Server(前称Acano Conferencing Server,CMS)是美国思科(Cisco)公司的一套包含音频、视频的会议服务器软件。 CMS的Extensible Messaging and Presence Protocol服务存在身份验证绕过漏洞。远程攻击者可利用该漏洞访问系统。以下产品和版本受到影响:Cisco Meeting Server 2.0.6之前的版本,Acano Server 1.8.18之前的版本,1.9.6之前的1.9.x版本。
CVSS Information
N/A
Vulnerability Type
N/A