A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote malicious user to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the malicious user to download files that other users attach through the chat feature. This vulnerability affects versions before 12.0(1)ES1.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco enterprise chat and email 11.6\\(1\\)es9 |
Vulmon