Atos Unify OpenScape UC Web Client 1.0 allows remote...
Moderate severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 29, 2023
Description
Published by the National Vulnerability Database
Feb 21, 2020
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Jan 29, 2023
Atos Unify OpenScape UC Web Client 1.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with their numbers and access PINs.
References