CVE-2015-4221

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service version 9.1(1)

Description The issue allows remote attackers to determine cleartext passwords and execute arbitrary commands by visiting an unspecified web page and conducting a decryption attack.

Recommendations For Cisco Unified Communications Manager IM and Presence Service version 9.1(1), update to a version that properly restricts access to encrypted passwords to prevent remote attackers from determining cleartext passwords and executing arbitrary commands.