CVE-2013-4869

Cisco Unified Communications Manager (CUCM) versions 7.1.x–9.1(2) and the IM & Presence Service in Cisco Unified Presence Server up to 9.1(2) share the same CTI and database-encryption key across different customer installations. This creates a cryptographic risk where context-dependent attackers...