#VU24527 Information disclosure in Unified Communications Manager (CallManager) - CVE-2019-15963

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU24527

#VU24527 Information disclosure in Unified Communications Manager (CallManager) - CVE-2019-15963

Published: January 24, 2020


Vulnerability identifier: #VU24527
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2019-15963
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Unified Communications Manager (CallManager)
Software vendor:
Cisco Systems, Inc

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to insufficient protection of user-supplied input by the web-based management interface of the affected service. A remote authenticated attacker can access the interface, view restricted portions of the software configuration and gain unauthorized access to sensitive information on the system.


Remediation

Install updates from vendor's website.

External links