CVE-2015-4221 | BDVDB-2026-70098 Detail

Description#

Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/viewAlert.x?alertId=39505
http://www.securityfocus.com/bid/75401
http://www.securitytracker.com/id/1032716

Exploit#

No public exploit known

History#

Version 12015-06-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.