CVEvulnerability
CVE-2008-2062
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.
Affected configurations
• cisco unified communications manager (>= 4.2 < 4.2\(3\)sr4)
• cisco unified communications manager (>= 4.3 < 4.3\(2\)sr1)
• cisco unified communications manager (>= 5.0 < 5.1\(3c\))
• cisco unified communications manager (>= 6.0 < 6.1\(2\))
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/30848 Third Party Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/29935 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020361 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1933/references Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43355 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30848 Third Party Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/29935 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020361 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1933/references Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43355 Third Party Advisory, VDB Entry