CVE-2019-19866

CVE-2019-19866 affects Atos Unify OpenScape UC Web Client: OpenScape UC Web Client V9 before R4.31.0 and V10 before R0.6.0 are vulnerable. An attacker can enumerate all scheduled conferences by iterating conferenceId in the JSON API getMailFunction, exposing conference numbers and access PINs. Th...