Cleartext Encryption Key Storage Vulnerability in Cisco Unified Communications Manager and Related Services (Bug ID CSCuv85958)

Cleartext Encryption Key Storage Vulnerability in Cisco Unified Communications Manager and Related Services (Bug ID CSCuv85958)

CVE-2016-1319 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.

Learn more about our Contact.