QwikSec

Security Database

CVE

CWE

Training

CVE-2019-19866

Published: Feb 21, 2020

Modified: Aug 5, 2024

PUBLISHED

Description

Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with their numbers and access PINs.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://unify.com/en/support/security-advisories

x_refsource_MISC

https://networks.unify.com/security/advisories/OBSO-2002-01.pdf

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.