CVE-2014-8024

The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP 1 GET or 2 POST request, aka Bug ID CSCus19789...

CVE-2014-8024

CVE-2014-8024 affects Cisco Jabber Guest Server: the API vulnerable due to insufficient validation of values passed via HTTP GET/POST, enabling an unauthenticated remote attacker to sniff network traffic and access sensitive information. Cisco notes no software updates are available; exploitation...