← Retour aux CVEs
CVE-2024-48352
HIGH7.5
Description
Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.
Details CVE
Score CVSS v3.17.5
SeveriteHIGH
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie11/1/2024
Derniere modification11/5/2024
Sourcenvd
Observations honeypot0
Produits affectes
yealink:yealink_meeting_server
Faiblesses (CWE)
CWE-922
References
http://yealink.com(cve@mitre.org)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.