Cisco TelePresence TC Software Collaboration Desk and Room Endpoints HTML Redirection Vulnerability

Bugtraq ID:	74154
Class:	Input Validation Error
CVE:	CVE-2015-0697
Remote:	Yes
Local:	No
Published:	Apr 14 2015 12:00AM
Updated:	Apr 14 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco TelePresence TC Software 6.0.2 Cisco TelePresence TC Software 7.2 Cisco TelePresence TC Software 6.3 Cisco TelePresence TC Software 6.1.2-CUCM Cisco TelePresence TC Software 6.1.2 Cisco TelePresence TC Software 6.1.1-CUCM Cisco TelePresence TC Software 6.1.1 Cisco TelePresence TC Software 6.1.0-CUCM Cisco TelePresence TC Software 6.0.1-CUCM Cisco TelePresence TC Software 6.0.1 Cisco TelePresence TC Software 6.0.0-CUCM Cisco TelePresence TC Software 6.0.0 Cisco Collaboration Room Endpoints 0 Cisco Collaboration Desk Endpoints 0
Not Vulnerable:

Cisco TelePresence TC Software Collaboration Desk and Room Endpoints HTML Redirection Vulnerability

Cisco Collaboration Desk and Room Endpoints running TelePresence TC Software are prone to an HTML-redirection vulnerability because it fails to properly sanitize user-supplied input.

An attacker can leverage this issue to conduct phishing attacks; other attacks are possible.

This issue is being tracked by Cisco Bug ID CSCuq94980.

Cisco TelePresence TC Software Collaboration Desk and Room Endpoints HTML Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Cisco TelePresence TC Software Collaboration Desk and Room Endpoints HTML Redirection Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco TelePresence Collaboration Desk and Room Endpoints HTML Redirect Vulnerabi (Cisco)
  
• Collaboration Desk Endpoints Homepage (Cisco)
  
• Collaboration Room Endpoints Homepage (Cisco)