CVE-2015-0763

Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338.

Severity	MEDIUM
CVSS	5.0
EPSS	0.24% EPSS low
CWE	CWE-200
KEV
Published	10 years ago
Modified	2 weeks ago

Public Affected Products

Product	Advisory	Evidence
Cisco Unified MeetingPlace	Cisco-SA-20150602-CVE-2015-0763	Cisco CSAF · structured affected