CVE-2011-1643

Published: Aug 29, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.

Affected (69)

Products: Cisco: Unified Communications Manager, Unified Presence Server

Cisco

2 products

Unified Communications Manager

Unified Presence Server

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Communications Manager	Version 6.0
Cisco Unified Communications Manager	Version 6.1(1)
Cisco Unified Communications Manager	Version 6.1(1a)
Cisco Unified Communications Manager	Version 6.1(1b)
Cisco Unified Communications Manager	Version 6.1(2)
Cisco Unified Communications Manager	Version 6.1(2)su1
Cisco Unified Communications Manager	Version 6.1(2)su1a
Cisco Unified Communications Manager	Version 6.1(3)
Cisco Unified Communications Manager	Version 6.1(3a)
Cisco Unified Communications Manager	Version 6.1(3b)
Cisco Unified Communications Manager	Version 6.1(3b)su1
Cisco Unified Communications Manager	Version 6.1(4)
Cisco Unified Communications Manager	Version 6.1(4)su1
Cisco Unified Communications Manager	Version 6.1(4a)
Cisco Unified Communications Manager	Version 6.1(4a)su2
Cisco Unified Communications Manager	Version 6.1(5)
Cisco Unified Communications Manager	Version 6.1(5)su1
Cisco Unified Communications Manager	Version 6.1(5)su2
Cisco Unified Communications Manager	Version 7.0(1)su1
Cisco Unified Communications Manager	Version 7.0(1)su1a
Cisco Unified Communications Manager	Version 7.0(2)
Cisco Unified Communications Manager	Version 7.0(2a)
Cisco Unified Communications Manager	Version 7.0(2a)su1
Cisco Unified Communications Manager	Version 7.0(2a)su2
Cisco Unified Communications Manager	Version 7.1(2a)
Cisco Unified Communications Manager	Version 7.1(2a)su1
Cisco Unified Communications Manager	Version 7.1(2b)
Cisco Unified Communications Manager	Version 7.1(2b)su1
Cisco Unified Communications Manager	Version 7.1(3)
Cisco Unified Communications Manager	Version 7.1(3a)
Cisco Unified Communications Manager	Version 7.1(3a)su1
Cisco Unified Communications Manager	Version 7.1(3a)su1a
Cisco Unified Communications Manager	Version 7.1(3b)
Cisco Unified Communications Manager	Version 7.1(3b)su1
Cisco Unified Communications Manager	Version 7.1(3b)su2
Cisco Unified Communications Manager	Version 7.1(5)
Cisco Unified Communications Manager	Version 7.1(5)su1
Cisco Unified Communications Manager	Version 7.1(5)su1a
Cisco Unified Communications Manager	Version 7.1(5a)
Cisco Unified Communications Manager	Version 7.1(5b)
Cisco Unified Communications Manager	Version 7.1(5b)su1
Cisco Unified Communications Manager	Version 7.1(5b)su1a
Cisco Unified Communications Manager	Version 7.1(5b)su2
Cisco Unified Communications Manager	Version 7.1(5b)su3
Cisco Unified Communications Manager	Version 8.0
Cisco Unified Communications Manager	Version 8.5
Cisco Unified Communications Manager	Version 8.5(1)
Cisco Unified Communications Manager	Version 8.5(1)su1

Configuration B

21 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Presence Server	Version 6.0(1)
Cisco Unified Presence Server	Version 6.0(2)
Cisco Unified Presence Server	Version 6.0(3)
Cisco Unified Presence Server	Version 6.0(4)
Cisco Unified Presence Server	Version 6.0(5)
Cisco Unified Presence Server	Version 6.0(6)
Cisco Unified Presence Server	Version 6.0(7)
Cisco Unified Presence Server	Version 7.0(1)
Cisco Unified Presence Server	Version 7.0(2)
Cisco Unified Presence Server	Version 7.0(3)
Cisco Unified Presence Server	Version 7.0(4)
Cisco Unified Presence Server	Version 7.0(5)
Cisco Unified Presence Server	Version 7.0(6)
Cisco Unified Presence Server	Version 7.0(7)
Cisco Unified Presence Server	Version 7.0(8)
Cisco Unified Presence Server	Version 7.0(9)
Cisco Unified Presence Server	Version 8.0
Cisco Unified Presence Server	Version 8.5
Cisco Unified Presence Server	Version 8.5(1)
Cisco Unified Presence Server	Version 8.5(2)
Cisco Unified Presence Server	Version 8.5(3)

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml

Source: psirt@cisco.com

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.