CVE-2008-2730

2008-06-2617:41:00

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

77.3%

JSON

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsj90843.

Affected configurations

Nvd

Node

ciscounified_communications_managerMatch5.1

ciscounified_communications_managerMatch6.1

VendorProductVersionCPE
ciscounified_communications_manager5.1cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*
ciscounified_communications_manager6.1cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_communications_manager	5.1	cpe:2.3:a:cisco:unified_communications_manager:5.1:::::::*
cisco	unified_communications_manager	6.1	cpe:2.3:a:cisco:unified_communications_manager:6.1:::::::*