Cisco TelePresence Video Communication Server Policy Services Security Bypass Vulnerability

Bugtraq ID:	57486
Class:	Access Validation Error
CVE:	CVE-2012-5444
Remote:	Yes
Local:	No
Published:	Jan 12 2013 12:00AM
Updated:	Jan 12 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco TelePresence Video Communication Server (VCS) X7.0.3
Not Vulnerable:

Cisco TelePresence Video Communication Server Policy Services Security Bypass Vulnerability

Cisco TelePresence Video Communication Server is prone to a security-bypass vulnerability.

Successful exploits may allow an attacker to bypass intended security restrictions. This may aid in further attacks.

Cisco TelePresence Video Communication Server X7.0.3 is vulnerable; other versions may also be affected.

This issue is being tracked by Cisco Bug ID CSCub67989.

Cisco TelePresence Video Communication Server Policy Services Security Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco TelePresence Video Communication Server Policy Services Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco TelePresence Video Communication Server Policy Services Security Bypass Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco TelePresence Video Communication Server Vulnerability in Policy Services (Cisco)