Cisco Unified Communications Manager IM and Presence Service Enumeration Vulnerability (CSCur63497)

According to its self-reported version, the Cisco Unified Communications Manager IM and Presence Server installed on the remote host is affected by a user enumeration vulnerability due to improper sanitation of returned messages. An attacker can exploit this vulnerability by sending a series of...

CVE-2014-8000

Cisco Unified Communications Manager IM and Presence Service 9.11 produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCur63497...

CVE-2014-8000

CVE-2014-8000 affects Cisco Unified Communications Manager IM and Presence Service 9.1(1). The vulnerability arises from improper sanitization of returned messages, causing different URL responses depending on whether a username exists, enabling remote attackers to enumerate valid user accounts v...