← Volver a CVEs
CVE-2024-48352
HIGH7.5
Descripcion
Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.
Detalles CVE
Puntuacion CVSS v3.17.5
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado11/1/2024
Ultima modificacion11/5/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
yealink:yealink_meeting_server
Debilidades (CWE)
CWE-922
Referencias
http://yealink.com(cve@mitre.org)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.