Published: 26/06/2015 Updated: 28/12/2016

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Subscribe to Unified Communications Manager Im And Presence Service

Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote malicious users to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco unified communications manager im and presence service 9.1\\(1\\)

A vulnerability in the Cisco IM and Presence Service could allow an authenticated, remote attacker to gain elevated privileges The vulnerability is due to improper web page restrictions imposed by the affected software An authenticated, remote attacker could exploit this vulnerability to access encrypted passwords, which could result in privileg ...

CWE-264 http://tools.cisco.com/security/center/viewAlert.x?alertId=39505 http://www.securityfocus.com/bid/75401 http://www.securitytracker.com/id/1032716 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150624-CVE-2015-4221

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-4221

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect