Design/Logic Flaw

A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.69. Known Fixed Releases: 11.00...

CVE-2016-9224

Cisco Jabber Guest Server exposes an unauthenticated remote vector that enables connections to arbitrary hosts due to insufficient access control for HTTP traffic. Affected release: 10.6(9); fixed in 11.0(0). Advisory and public details (Cisco SA 2016-12-21) describe a URL-based vulnerability tha...