PT-2011-3260 · Cisco · Cisco Unified Presence Server+1

Published 2011-08-29 · Updated 2012-06-15 · CVE-2011-1643

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 8.0 and 8.5 before 8.5(1)su2 Cisco Unified Presence Server versions 6.x through 8.5 before 8.5xnr

Description The issue allows remote attackers to read database data by connecting to a query interface through an SSL session.

Recommendations For Cisco Unified Communications Manager versions 6.x through 8.0 and 8.5 before 8.5(1)su2, update to version 8.5(1)su2 or later. For Cisco Unified Presence Server versions 6.x through 8.5 before 8.5xnr, update to version 8.5xnr or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-1643

Affected Products

Cisco Unified Communications Manager

Cisco Unified Presence Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-1643 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml · Vendor Advisory