Lucene search
HistoryNov 21, 2014 - 2:59 a.m.
CVE-2014-8000
cisco
unified communications manager
im
presence service
remote attack
user enumeration
bug id
cscur63497
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.2%
Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCur63497.
Affected configurations
Node
ciscounified_communications_manager_im_and_presence_serviceMatch9.1\(1\)
Related
prion
prion
Code injection
2014-11-21 02:59:00
cisco
cisco
cvelist
cvelist
CVE-2014-8000
2014-11-21 02:00:00
nessus
nessus
nvd
nvd
CVE-2014-8000
2014-11-21 02:59:05
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.2%
Related for CVE-2014-8000