CVE-2019-16017

🗓️ 23 Sep 2020 00:26:36Reported by ciscoType

A vulnerability in OAMP OpsConsole Server for Cisco Unified CVP allows authenticated remote attacker to execute Insecure Direct Object Reference actions. Insufficient input validation on specific pages of the OAMP application may allow attacker to learn information outside of expected scope or modify configuration details resulting in a DoS condition

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-16017	23 Sep 202007:55	–	circl
Cisco	Cisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability	8 Jan 202016:00	–	cisco
CNVD	Cisco Unified Customer Voice Portal Privilege Permission and Access Control Issues Vulnerability	10 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-16017 Cisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability	23 Sep 202000:26	–	cvelist
EUVD	EUVD-2019-6906	7 Oct 202500:30	–	euvd
NVD	CVE-2019-16017	23 Sep 202001:15	–	nvd
OSV	CVE-2019-16017	23 Sep 202001:15	–	osv
Prion	Input validation	23 Sep 202001:15	–	prion
Symantec	Cisco Unified Customer Voice Portal CVE-2019-16017 Denial of Service Vulnerability	8 Jan 202000:00	–	symantec
Vulnrichment	CVE-2019-16017 Cisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability	23 Sep 202000:26	–	vulnrichment

NVD

Node

cisco unified_customer_voice_portalRange<11.6(1)_es-11

Node

cisco unified_customer_voice_portalRange<12.0(1)_es-7

[
  {
    "product": "Cisco Unified Customer Voice Portal (CVP)",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200108-cvp-direct-obj-ref

21 Nov 2024 04:29Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24

CVSS 3.16.8

CVSS 36.8

EPSS0.00104

SSVC