CVEvulnerability
CVE-2008-2730
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsj90843.
Affected configurations
• cisco unified communications manager 5.1
• cisco unified communications manager 6.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/30848 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml Patch
- http://www.securityfocus.com/bid/29935 www.securityfocus.com
- http://www.securitytracker.com/id?1020361 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1933/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43355 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30848 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml Patch
- http://www.securityfocus.com/bid/29935 www.securityfocus.com
- http://www.securitytracker.com/id?1020361 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1933/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43355 exchange.xforce.ibmcloud.com