NetSight
IP …
medium5.0

CVE-2008-2062

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows…

Impact

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.

Affected products

VendorProductAffected versions
CiscoUnified Communications Manager
from 4.2 before 4.2\(3\)sr4
from 4.3 before 4.3\(2\)sr1
from 5.0 before 5.1\(3c\)
from 6.0 before 6.1\(2\)

Weakness classification

CWE-264

References