Lucene search

PRIOn knowledge basePRION:CVE-2008-2062

HistoryJun 26, 2008 - 5:41 p.m.

Authentication flaw

2008-06-2617:41:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.7%

JSON

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.

CPENameOperatorVersion
unified_communications_managerge4.3
unified_communications_managerlt4.3
unified_communications_managerge5.0
unified_communications_managerlt5.1
unified_communications_managerge6.0
unified_communications_managerlt6.1
unified_communications_managerge4.2
unified_communications_managerlt4.2

Name	Operator	Version
unified_communications_manager	ge	4.3
unified_communications_manager	lt	4.3
unified_communications_manager	ge	5.0
unified_communications_manager	lt	5.1
unified_communications_manager	ge	6.0
unified_communications_manager	lt	6.1
unified_communications_manager	ge	4.2
unified_communications_manager	lt	4.2

References

secunia.com/advisories/30848

www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml

www.securityfocus.com/bid/29935

www.securitytracker.com/id?1020361

www.vupen.com/english/advisories/2008/1933/references

exchange.xforce.ibmcloud.com/vulnerabilities/43355

6.9 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for PRION:CVE-2008-2062