Lucene search

[email protected]CVE-2016-6444

HistoryOct 27, 2016 - 9:59 p.m.

CVE-2016-6444

2016-10-2721:59:15

CWE-352

[email protected]

web.nvd.nist.gov

cve-2016-6444

cisco meeting server

vulnerability

csrf

nvd

cscvb03308

web bridge

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

JSON

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0.

Affected configurations

NVD

Node

ciscomeeting_serverMatch1.8.15

ciscomeeting_serverMatch1.8_base

ciscomeeting_serverMatch1.9.0

ciscomeeting_serverMatch1.9.2

ciscomeeting_serverMatch2.0.0

ciscomeeting_serverMatch2.0.1

ciscomeeting_serverMatch2.0.3

ciscomeeting_serverMatch2.0.4

ciscomeeting_serverMatch2.0.5

CPENameOperatorVersion
cisco:meeting_servercisco meeting servereq1.8.15
cisco:meeting_servercisco meeting servereq1.8_base
cisco:meeting_servercisco meeting servereq1.9.0
cisco:meeting_servercisco meeting servereq1.9.2
cisco:meeting_servercisco meeting servereq2.0.0
cisco:meeting_servercisco meeting servereq2.0.1
cisco:meeting_servercisco meeting servereq2.0.3
cisco:meeting_servercisco meeting servereq2.0.4
cisco:meeting_servercisco meeting servereq2.0.5

CPE	Name	Operator	Version
cisco:meeting_server	cisco meeting server	eq	1.8.15
cisco:meeting_server	cisco meeting server	eq	1.8_base
cisco:meeting_server	cisco meeting server	eq	1.9.0
cisco:meeting_server	cisco meeting server	eq	1.9.2
cisco:meeting_server	cisco meeting server	eq	2.0.0
cisco:meeting_server	cisco meeting server	eq	2.0.1
cisco:meeting_server	cisco meeting server	eq	2.0.3
cisco:meeting_server	cisco meeting server	eq	2.0.4
cisco:meeting_server	cisco meeting server	eq	2.0.5

CNA Affected

[
  {
    "product": "Cisco Meeting Server 1.8, 1.9, 2.0",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Meeting Server 1.8, 1.9, 2.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/93785

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

JSON

Related for CVE-2016-6444

cvelist1 openvas1 prion1 nvd1 cisco1