CVEvulnerability

CVE-2015-4218

5.0 MEDIUM Published 2015-06-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-06-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.

Affected configurations

• cisco jabber 9.6\(0\) • cisco jabber 9.6\(1\) • cisco jabber 9.6\(2\) • cisco jabber 9.6\(3\) • cisco jabber 9.7\(0\) • cisco jabber 9.7\(1\) • cisco jabber 9.7\(2\) • cisco jabber 9.7\(3\) • cisco jabber 9.7\(4\) • cisco jabber 9.7\(5\)

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References