Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.
References
Link | Resource |
---|---|
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml | Vendor Advisory |
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:26
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml - Vendor Advisory |
Information
Published : 2011-08-29 15:55
Updated : 2024-11-21 01:26
NVD link : CVE-2011-1643
Mitre link : CVE-2011-1643
CVE.ORG link : CVE-2011-1643
JSON object : View
Products Affected
cisco
- unified_communications_manager
- unified_presence_server
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor