Cisco Unified Communications Manager / Cisco Unified Presence Server information leakage
Published:		30.08.2011
Source:		BUGTRAQ
SecurityVulns ID:		11883
Type:		remote
Level:		6/10
Description:		OpenQuery information leakage.

Affected:		CISCO : Unified Communications Manager 8.5
		CISCO : Unified Presence Server 8.5
CVE:		CVE-2011-1643 (Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.)

Original document

CISCO, Cisco Security Advisory: Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server (30.08.2011)

Discuss:

Read or add your comments to this news (0 comments)