Lucene search

K
cve[email protected]CVE-2016-1319
HistoryFeb 09, 2016 - 3:59 a.m.

CVE-2016-1319

2016-02-0903:59:03
CWE-200
web.nvd.nist.gov
22
cisco
unified communications
callmanager
cve-2016-1319
encryption key
vulnerability
nvd
bug id cscuv85958

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

43.0%

Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.

Affected configurations

NVD
Node
sunopensolarisMatchsnv_124sparc
Node
samsungx14j_firmwareMatcht-ms14jakucb-1102.5
Node
sunopensolarisMatchsnv_124sparc
OR
zyxelgs1900-10hp_firmwareRange<2.50\(aazi.0\)c0
OR
zzinckeymouse_firmwareMatch3.08windows
Node
zzinckeymouse_firmwareMatch3.08windows

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

43.0%

Related for CVE-2016-1319