Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the attacker could potentially cause the application to crash unexpectedly, resulting in a denial of service (DoS) condition. The attacker would need to be authenticated and have a valid session with the Web Bridge. Affected Products: This vulnerability affects Cisco Meeting Server software releases prior to 2.1.2. This product was previously known as Acano Conferencing Server. More Information: CSCvc89551. Known Affected Releases: 2.0 2.0.7 2.1. Known Fixed Releases: 2.1.2.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Meeting Server 安全漏洞
Vulnerability Description
Cisco Meeting Server（前称Acano Conferencing Server，CMS）是美国思科（Cisco）公司的一套包含音频、视频的会议服务器软件。 CMS 2.1.2之前的版本中的Web Bridge界面存在安全漏洞，该漏洞源于程序没有充分的验证HTTP请求。远程攻击者可通过向目标应用程序发送特制的HTTP数据包利用该漏洞检索内存内容，造成敏感信息泄露或拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A