Cisco Jabber Information Disclosure Vulnerability (Jun 2015) - Windows

Cisco Jabber is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cisco:jabber";...

CVE-2015-4218

Cisco Jabber for Windows (web-based UI) is vulnerable to information disclosure via a crafted value in an HTTP GET request for versions 9.6(3) and 9.7–9.7(5). The root cause is insufficient validation of GET parameters, allowing remote attackers to obtain sensitive information. Affected product: ...