CVE-2008-2730

Cisco Unified Communications Manager 5.x-5.1(3)/6.x-6.1(1) - Authentication Bypass via RIS Data Collector

Title source: llm

Description

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsj90843.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43355

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/29935

Patch vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1933/references

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30848

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020361

Scores

EPSS 0.0169

EPSS Percentile 74.2%

Details

CWE

CWE-287

Status published

Products (2)

cisco/unified_communications_manager 5.1

cisco/unified_communications_manager 6.1

Published Jun 26, 2008

Tracked Since Feb 18, 2026