CVE-2014-0672

Currently unrated

Key Information:

Vendor
Cisco
Status
Mediasense
Vendor
CVE Published:
22 January 2014

Summary

The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.

References

http://www.securitytracker.com/id/1029668
vdb-entryx_refsource_SECTRACK
http://osvdb.org/102342
vdb-entryx_refsource_OSVDB
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.