CVE Vulnerability

CVE-2008-2062

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

Scope

References
Link Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml Patch Vendor Advisory
http://www.securitytracker.com/id?1020361 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/29935 Third Party Advisory VDB Entry
http://secunia.com/advisories/30848 Third Party Advisory
http://www.vupen.com/english/advisories/2008/1933/references Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/43355 Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
Information

Published : 2008-06-26 05:41

Updated : 2019-07-31 12:55

NVD link : CVE-2008-2062

Mitre link : CVE-2008-2062

Products Affected
No products.
CWE
CWE-264