VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 21, 2020· Updated Jun 17, 2026

CVE-2019-19866

CVE-2019-19866

Description

Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with their numbers and access PINs.

Affected products

4
  • Atos/Unify Openscape Uc Web Client2 versions
    cpe:2.3:a:atos:unify_openscape_uc_web_client:10.0:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atos:unify_openscape_uc_web_client:10.0:-:*:*:*:*:*:*
    • cpe:2.3:a:atos:unify_openscape_uc_web_client:9.0:-:*:*:*:*:*:*
  • Atos Unify/OpenScape UC Web Clientdescription
  • Atos Unify/OpenScape UC Web Clientllm-fuzzy
    Range: < V9 R4.31.0, < V10 R0.6.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.