CVE-2012-6118

The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting...

CVE-2012-6118

The CVE-2012-6118 issue affects Aeolus Conductor’s web-based management console, where an unprivileged (authenticated) user could bypass quota restrictions by modifying the Maximum Running Instances quota setting. Connected sources corroborate an authorization-bypass style flaw tied to Conductor ...

CVE-2012-6118: Undefined Security Weakness

The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting...

PT-2013-1903

Name of the Vulnerable Software and Affected Versions Aeolus Conductor affected versions not specified Description The issue allows remote authenticated users to bypass intended quota restrictions. This is achieved by updating the Maximum Running Instances quota user setting through the Administe...

Conductor: Unprivileged user can change their own Maximum Running Instances quota

The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting...

Cisco TelePresence Video Communication Server Policy Services Security Bypass Vulnerability

Cisco TelePresence Video Communication Server VCS contains a vulnerability that could allow an unauthenticated, remote attacker to bypass security restrictions on a targeted system. The vulnerability is due to improper processing of certain search rules processed by the affected software. An...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989...

CVE-2012-5444

Cisco TelePresence Video Communication Server (VCS) X7.0.3 contains a vulnerability where improper processing of certain search rules can be exploited by an unauthenticated, remote attacker to bypass security restrictions and create conferences via an unspecified Conductor request. The Cisco advi...

CVE-2012-5444: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989...

PT-2013-1798

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS version X7.0.3 Description The issue arises from improper processing of certain search rules, allowing remote attackers to create conferences via an unspecified Conductor request. Recommendatio...

Denial of Service (DoS) Vulnerability in JP1/ServerConductor/Control Manager

Overview A built-in database in JP1/ServerConductor/Control Manager contains a vulnerability that could cause a denial of service DoS condition due to the abnormal ending of the database process when receiving unexpected data. After the process abends, the service can be restarted by rebooting th...

Forced Shutdown or Restart with JP1/ServerConductor/Deployment Manager

Overview JP1/ServerConductor/Deployment Manager's Client Service for DPM has a vulnerability which could cause a shutdown or restart of the client computer when receiving ill-formed data. Impact A remote attacker could shut down or restart the target system. Solution Please refer to the 'Vendor...