PT-2015-6468
CVE-2015-4221
·
تاريخ النشر
2015-06-26
·
تاريخ التحديث
2016-12-28
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Unified Communications Manager IM and Presence Service version 9.1(1)
Description
The issue allows remote attackers to determine cleartext passwords and execute arbitrary commands by visiting an unspecified web page and conducting a decryption attack.
Recommendations
For Cisco Unified Communications Manager IM and Presence Service version 9.1(1), update to a version that properly restricts access to encrypted passwords to prevent remote attackers from determining cleartext passwords and executing arbitrary commands.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾