A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to bypass security restrictions. The vulnerability is due to improper handling of malformed HTTP methods. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. A successful exploit could allow the attacker to gain unauthorized access to the system.
History

Tue, 19 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2019-10-02T19:06:55.659365Z

Updated: 2024-11-19T18:53:14.532Z

Reserved: 2019-08-20T00:00:00

Link: CVE-2019-15272

cve-icon Vulnrichment

Updated: 2024-08-05T00:42:03.947Z

cve-icon NVD

Status : Modified

Published: 2019-10-02T19:15:15.343

Modified: 2024-11-21T04:28:21.120

Link: CVE-2019-15272

cve-icon Redhat

No data.