Cisco warns of Unified MeetingPlace flaws

Powered by SC Magazine
 

Urgent fix for four vulnerabilities.

Cisco has urged enterprise users to update their systems following the disclosure of four vulnerabilities in the firm's Unified MeetingPlace conferencing tool.

The company said in a security advisory that it has released fixes for versions 5, 6 and 7 of the application. No other products are believed to be vulnerable.

Some of the flaws could allow an attacker to create unauthorised user or administrator accounts through the use of malformed URL addresses.

Other problems could allow unauthorised database access, unauthorised access to user credential information and elevation of privilege attacks.

Cisco claimed that there had been no reports of attacks targeting the vulnerability in the wild.

The company has posted a hotfix which addresses the flaws in versions 6 and 7 of Unified MeetingPlace. No other patches or workarounds are available.

Copyright ©v3.co.uk


Cisco warns of Unified MeetingPlace flaws
 
 
 
Top Stories
Matching databases to Linux distros
Reviewed: OS-repository DBMSs, MariaDB vs MySQL.
 
Coalition's NBN cost-benefit study finds in favour of MTM
FTTP costs too much, would take too long.
 
Who'd have picked a BlackBerry for the Internet of Things?
[Blog] BlackBerry has a more secure future in the physical world.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  70%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  12%
 
Denial of service attacks
  6%
 
Insider threats
  10%
TOTAL VOTES: 711

Vote