PT-2015-6468 · Cisco · Cisco Unified Communications Manager Im/Presence Service

Publicado 2015-06-26 · Atualizado 2016-12-28 · CVE-2015-4221

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service version 9.1(1)

Description The issue allows remote attackers to determine cleartext passwords and execute arbitrary commands by visiting an unspecified web page and conducting a decryption attack.

Recommendations For Cisco Unified Communications Manager IM and Presence Service version 9.1(1), update to a version that properly restricts access to encrypted passwords to prevent remote attackers from determining cleartext passwords and executing arbitrary commands.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-4221

Produtos afetados

Cisco Unified Communications Manager Im/Presence Service

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-4221 · Nota de Segurança
• http://securityfocus.com/bid/75401 · Nota
• http://securitytracker.com/id/1032716 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39505 · Aviso do Fabricante