Cisco MediaSense Search and Play Authorization Vulnerability

A vulnerability in the Search and Play interface of Cisco MediaSense could allow an authenticated, remote attacker to access recordings in the Search and Play interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by accessing the...

CVE-2014-0672

The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface...

PT-2014-3767

Name of the Vulnerable Software and Affected Versions Cisco MediaSense affected versions not specified Description The issue concerns the Search and Play interface in Cisco MediaSense, where authorization requirements are not properly enforced. This allows remote authenticated users to download...

CVE-2014-0672: Undefined Security Weakness

The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface...

CVE-2014-0670: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686...

PT-2014-3765

Name of the Vulnerable Software and Affected Versions Cisco MediaSense affected versions not specified Description A cross-site scripting XSS issue exists in the Search and Play interface, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendatio...