CVE-2015-4221
Cisco Unified Communications Manager IM and Presence Service 9.1(1) - Password Exposure and RCE
Title source: llmDescription
Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39505
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75401
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032716
Scores
EPSS
0.0233
EPSS Percentile
81.8%
Details
CWE
CWE-264
Status
published
Products (1)
cisco/unified_communications_manager_im_and_presence_service
9.1\(1\)
Published
Jun 26, 2015
Tracked Since
Feb 18, 2026