CVE-2008-2062
Cisco Unified Communications Manager < 4.2(3)SR4 - Unauthenticated Information Disclosure via RIS Data Collector Service
Title source: llmDescription
The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43355
Permissions Required vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1933/references
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1020361
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30848
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/29935
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml
Scores
EPSS
0.0231
EPSS Percentile
81.6%
Details
CWE
CWE-264
Status
published
Products (1)
cisco/unified_communications_manager
4.2 - 4.2\(3\)sr4
Published
Jun 26, 2008
Tracked Since
Feb 18, 2026