CVE:CVE-2019-1679
CNNVD:CNNVD-201902-306
Cisco Expressway Series等都是美国思科（Cisco）公司的产品。Cisco Expressway Series是一款用于统一通信的高级协作网关。Cisco TelePresence Video Communication Server（VCS）是一款视频通信服务器。Cisco TelePresence Conductor是一套视频会议资源管理解决方案。
Cisco TelePresence Conductor、Expressway Series和TelePresence VCS 中存在代码问题漏洞，该漏洞源于程序没有对REST API执行充分的访问控制。远程攻击者可利用该漏洞向任意主机发送HTTP请求。
solution:Upgrade cisco telepresence_video_communication_server to a higher version than x12.5,and avoid the version (,x12.5); Upgrade cisco telepresence_conductor to a higher version than xc4.3.4,and avoid the version (,xc4.3.4)