Cisco Unified Communications Manager Multiple Vulnerabilities Fixed by 9.2, 10.5.2 and 11.0.1
Description
Several vulnerabilities were reported in Cisco Unified Communications Manager:
- command execution. A remote attacker could exploit it in order to execute ping command, which could be used to enumerate the internal network. This vulnerability stems from the "pingExecute" servlet which allows user to execute ping command without restriction
- security bypass located in "GetUserLoginInfoHandler" and "GetLoggedinXMPPUserHandler" methods in the EPAS SOAP interface. A remote attacker could exploit it by using a hardcoded session ID in order to bypass authentification.
A proof of concept is available for command execution vulnerability.
