CVE-2008-2730
First published: Thu Jun 26 2008(Updated: )
The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsj90843.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Communications Manager | =6.1 | |
| Cisco Unified Communications Manager | =5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml
- http://secunia.com/advisories/30848
- http://www.securityfocus.com/bid/29935
- http://www.securitytracker.com/id?1020361
- http://www.vupen.com/english/advisories/2008/1933/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43355
Frequently Asked Questions
What is the severity of CVE-2008-2730?
CVE-2008-2730 has a high severity rating due to its potential to allow remote authentication bypass.
How do I fix CVE-2008-2730?
To fix CVE-2008-2730, update Cisco Unified Communications Manager to version 5.1(3) or later for 5.x systems or version 6.1(1) or later for 6.x systems.
What could an attacker do with CVE-2008-2730?
An attacker could bypass authentication and access sensitive cluster configuration information and statistics.
Which versions of Cisco Unified Communications Manager are affected by CVE-2008-2730?
CVE-2008-2730 affects Cisco Unified Communications Manager versions 5.x before 5.1(3) and 6.x before 6.1(1).
Is CVE-2008-2730 a widespread vulnerability?
CVE-2008-2730 is considered to be a significant vulnerability impacting multiple installations of Cisco Unified Communications Manager.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/cisco
- canonical/cisco unified communications manager
- version/cisco unified communications manager/5.1
- version/cisco unified communications manager/6.1