CVE-2008-2730

2008-06-2617:41:00

CWE-287

[email protected]

web.nvd.nist.gov

information security

cisco

cucm

authentication bypass

vulnerability

cve-2008-2730

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.4%

JSON

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsj90843.

CPENameOperatorVersion
cisco:unified_communications_managercisco unified communications managereq6.1
cisco:unified_communications_managercisco unified communications managereq5.1

CPE	Name	Operator	Version
cisco:unified_communications_manager	cisco unified communications manager	eq	6.1
cisco:unified_communications_manager	cisco unified communications manager	eq	5.1