{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Webex Meetings Server versions ant\u00e9rieures \u00e0 3.0MR3SecurityPatch1","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Webex Meetings 39.5.x Sites versions ant\u00e9rieures \u00e0 39.5.17","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Webex Meetings Latest Sites versions ant\u00e9rieures \u00e0 40.0","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco Intelligent Proximity","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Webex Meetings Online versions ant\u00e9rieures \u00e0 1.3.49","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Webex Meetings Server versions 4.x ant\u00e9rieures \u00e0 4.0MR2SecurityPatch2","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}},{"description":"Cisco Prime Network Registrar versions ant\u00e9rieures \u00e0 10.1","product":{"name":"N/A","vendor":{"name":"Cisco","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2020-3127","url":"https://www.cve.org/CVERecord?id=CVE-2020-3127"},{"name":"CVE-2020-3155","url":"https://www.cve.org/CVERecord?id=CVE-2020-3155"},{"name":"CVE-2020-3128","url":"https://www.cve.org/CVERecord?id=CVE-2020-3128"},{"name":"CVE-2020-3148","url":"https://www.cve.org/CVERecord?id=CVE-2020-3148"}],"links":[],"reference":"CERTFR-2020-AVI-128","revisions":[{"description":"Version initiale","revision_date":"2020-03-05T00:00:00.000000"}],"risks":[{"description":"Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco.\nCertaines d'entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 l'int\u00e9grit\u00e9 des\ndonn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-proximity-ssl-cert-gBBu3RB du 04 mars 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-proximity-ssl-cert-gBBu3RB"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20200304-webex-player du 04 mars 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200304-webex-player"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-cpnr-csrf-WWTrDkyL du 04 mars 2020","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpnr-csrf-WWTrDkyL"}]}