Skip to content
fr Sign in
6.5 Medium

CVE-2021-1246 Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access…

Description

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote attacker to access the OpenSocial Gadget Editor without providing valid user credentials. The vulnerability is due to missing authentication for a specific section of the web-based management interface. An attacker could exploit this vulnerability by accessing a crafted URL. A successful exploit could allow the attacker to obtain access to a section of the interface, which they could use to obtain potentially confidential information and create arbitrary XML files. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Customer Voice Portal (CVP) Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Customer Voice Portal (CVP)

The 4 CVEs of Cisco Unified Customer Voice Portal (CVP) →
CVE-2021-1599 A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an… 5.4 Medium CVE-2021-1245 Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the… 6.5 Medium CVE-2019-16017 A vulnerability in the Operations, Administration, Maintenance and Provisioning (OAMP) OpsConsole Server for Cisco… 6.8 Medium
Track this CVE