Information disclosure in Cisco Unified Communications Manager
CVE-2011-1643
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.
Vulnerability class: Information Disclosure
EPSS: 0.019 (78.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_communications_manager — versions 7.0\(2a\)su1, 7.1(5b)su3, 6.1(3a)
- Cisco Unified_presence_server — versions 7.0(7), 7.0(8), 7.0\(9\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)