2014-05-26 02:25:31 2016-09-07 19:04:08

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE
Cisco TelePresence System Software 1.5.3(2115) Cisco TelePresence System Software 6.0.0.1(4) Cisco TelePresence System Software 1.6.2(4023) Cisco TelePresence System Software 1.6.4(4072) Cisco TelePresence System Software 1.9.1(68) Cisco TelePresence System Software 1.7.6(4) Cisco TelePresence System Software 1.8.2(11) Cisco TelePresence System Software 1.6.0(3954) Cisco TelePresence System Software 1.10.0(259) Cisco TelePresence System Software 1.7.0.2(4719) Cisco TelePresence System Software 1.8.0(55) Cisco TelePresence System Software 4.0.0 Cisco TelePresence System Software 1.8.1(34) Cisco TelePresence System Software 1.8.5(4) Cisco TelePresence System Software 1.7.2.1(2) Cisco TelePresence System Software 1.9.6(2) Cisco TelePresence System Software 1.9.3(44) Cisco TelePresence System Software 1.5.10(3648) Cisco TelePresence System Software 1.9.4(19) Cisco TelePresence System Software 1.8.4(13) Cisco TelePresence System Software 1.5.11(3659) Cisco TelePresence System Software 1.6.7(4212) Cisco TelePresence System Software 1.6.5(4097) Cisco TelePresence System Software 1.6.6(4109) Cisco TelePresence System Software 6.0.3(33) Cisco TelePresence System Software 1.7.1(4864) Cisco TelePresence System Software 6.0.2(28) Cisco TelePresence System Software 6.0.1(50) Cisco TelePresence System Software 1.9.6.1(3) Cisco TelePresence System Software 1.3.2(1393) Cisco TelePresence System Software 6.0.4(11) Cisco TelePresence System Software 1.7.2(4937) Cisco TelePresence System Software 6.0.5(5) Cisco TelePresence System Software 1.9.0(46) Cisco TelePresence System Software 1.8.3(4) Cisco TelePresence System Software 1.5.13(3717) Cisco TelePresence System Software 1.10.1(43) Cisco TelePresence System Software 1.7.0.1(4764) Cisco TelePresence System Software 1.9.3 Cisco TelePresence System Software 1.9.2 Cisco TelePresence System Software 1.9.0.1(3) Cisco TelePresence System Software 1.9.5 Cisco TelePresence System Software 1.9.4 Cisco TelePresence System Software 1.9.2(19) Cisco TelePresence System Software 1.4.7(2229) Cisco TelePresence System Software 1.10.2(42) Cisco TelePresence System Software 1.7.5(42) Cisco TelePresence System Software 1.5.12(3701) Cisco TelePresence System Software 1.10.3(41) Cisco TelePresence System Software 1.7.4(270) Cisco TelePresence System Software 1.10.1 Cisco TelePresence System Software 1.5.1(2082) Cisco TelePresence System Software 1.10.0 Cisco TelePresence System Software 1.9.6 Cisco TelePresence System Software 1.2.3(1101) Cisco TelePresence System Software 1.9.5(7) Cisco TelePresence System Software 1.6.3(4042) Cisco TelePresence System Software 1.6.8(4222)