PT-2011-3260 · Cisco · Cisco Unified Presence Server+1

Publicado 2011-08-29 · Atualizado 2012-06-15 · CVE-2011-1643

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 8.0 and 8.5 before 8.5(1)su2 Cisco Unified Presence Server versions 6.x through 8.5 before 8.5xnr

Description The issue allows remote attackers to read database data by connecting to a query interface through an SSL session.

Recommendations For Cisco Unified Communications Manager versions 6.x through 8.0 and 8.5 before 8.5(1)su2, update to version 8.5(1)su2 or later. For Cisco Unified Presence Server versions 6.x through 8.5 before 8.5xnr, update to version 8.5xnr or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-1643

Produtos afetados

Cisco Unified Communications Manager

Cisco Unified Presence Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-1643 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml · Aviso do Fabricante