CVEvulnerability
CVE-2016-6364
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified API calls, aka Bug ID CSCux67855.
Affected configurations
• cisco unified communications manager 11.5.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-ucm Vendor Advisory
- http://www.securityfocus.com/bid/92517 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036650 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-ucm Vendor Advisory
- http://www.securityfocus.com/bid/92517 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036650 Third Party Advisory, VDB Entry