Auth bypass in Cisco Emergency_responder
CVE-2008-1154
The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, doe…
Vulnerability class: Broken Authentication
EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Emergency_responder — versions 2.0
- Cisco Mobility_manager — versions 2.0
- Cisco Unified_communications_manager — versions 5.0, 5.1, 6.0
- Cisco Unified_presence — versions 1.0, 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)