CVE-2016-1322

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

CVE-2016-1322

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

Design/Logic Flaw

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

Design/Logic Flaw

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

Design/Logic Flaw

The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service resource outage by accessing an administrative page, aka Bug ID CSCuv84125...

CVE-2016-1323

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

CVE-2016-1323

The CVE-2016-1323 entry concerns Cisco Spark’s REST interface. The vulnerability allows an authenticated, remote attacker to view sensitive information by requesting a file from the REST API. The underlying cause is insufficient protections of sensitive data, enabling information disclosure. AFFE...

CVE-2016-1324

The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service resource outage by accessing an administrative page, aka Bug ID CSCuv84125...

CVE-2016-1324

CVE-2016-1324 affects Cisco Spark’s REST interface (Cisco Spark 2015-06). The issue arises from missing authorization checks on certain administrative pages, enabling an unauthenticated, remote attacker to cause a denial of service (resource outage) by accessing an admin page. Cisco’s advisory Ci...

CVE-2016-1322

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

CVE-2016-1322

The CVE-2016-1322 case concerns Cisco Spark’s REST interface, where improper authorization controls allow an unauthenticated, remote attacker to bypass access restrictions and create arbitrary user accounts. Multiple sources (NVD/NVDCNVD, CNVD, CVE list, and Cisco advisory) corroborate that the R...

PT-2016-4710

Name of the Vulnerable Software and Affected Versions Cisco Spark version 2015-06 Description The issue allows remote authenticated users to obtain sensitive information by making a request for an unspecified file. Recommendations For Cisco Spark version 2015-06, update to a version that fixes th...

PT-2016-4711

Name of the Vulnerable Software and Affected Versions Cisco Spark version 2015-06 Description The issue allows remote attackers to cause a denial of service by accessing an administrative page. Recommendations For Cisco Spark version 2015-06, update to a version that fixes the issue, as accessing...

CVE-2016-1324: Undefined Security Weakness

The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service resource outage by accessing an administrative page, aka Bug ID CSCuv84125...

CVE-2016-1323: Exposure of Sensitive Information to an Unauthorized Actor

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

CVE-2016-1322: Undefined Security Weakness

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

PT-2016-4709

Name of the Vulnerable Software and Affected Versions Cisco Spark version 2015-07-04 Description The issue allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests. Recommendations For Cisco Spark version 2015-07-04, consider...

Cisco Spark Representational State Transfer Interface Unauthorized Access Vulnerability

A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an unauthenticated, remote attacker to make changes to an affected system system. The vulnerability is due to improper implementation of authorization controls when accessing certain web pages of the...

Cisco Spark Representational State Transfer Interface Information Disclosure Vulnerability

A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an authenticated, remote attacker to view sensitive information from the underlying operating system. The vulnerability is due to insufficient protections of sensitive data. An attacker could exploit...

Cisco Spark Representational State Transfer Interface Denial of Service Vulnerability

A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to missing authorization checks on certain administrative pages. An...