Cisco Unified Communications Manager CVE-2013-4869 Information Disclosure Vulnerability

Bugtraq ID:	61364
Class:	Design Error
CVE:	CVE-2013-4869
Remote:	Yes
Local:	No
Published:	Jul 17 2013 12:00AM
Updated:	Jul 17 2013 12:00AM
Credit:	Lexfo
Vulnerable:	Cisco Unified Presence Server 9.1(2) Cisco Unified Presence Server 9.1(1) Cisco Unified Presence Server 9.1 Cisco Unified Presence Server 9.0 Cisco Unified Presence Server 8.6(3) Cisco Unified Presence Server 8.6 Cisco Unified Presence Server 8.5 Cisco Unified Presence Server 8.0 Cisco Unified Presence Server 7.0(8) Cisco Unified Presence Server 7.0(4) Cisco Unified Presence Server 7.0 Cisco Unified Presence Server 6.0(7) Cisco Unified Presence Server 6.0(6) Cisco Unified Presence Server 6.0(3) Cisco Unified Presence Server 6.0(2) Cisco Unified Presence Server 6.0(1) Cisco Unified Presence Server 6.0 Cisco Unified Presence Server 1.0(3) Cisco Unified Presence Server 1.0(2) Cisco Unified Presence Server 1.0 Cisco Unified Communications Manager 9.1(2) Cisco Unified Communications Manager 9.1(1a) Cisco Unified Communications Manager 9.1(1) Cisco Unified Communications Manager 9.0(1) Cisco Unified Communications Manager 9.0 Cisco Unified Communications Manager 8.6.3 Cisco Unified Communications Manager 8.6(4) BE3k Cisco Unified Communications Manager 8.6(4) Cisco Unified Communications Manager 8.6(2a)su2 Cisco Unified Communications Manager 8.6(2a)su1 Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5(1)su4 Cisco Unified Communications Manager 8.5(1)SU2 Cisco Unified Communications Manager 8.5(1)SU1 Cisco Unified Communications Manager 8.5(1) Cisco Unified Communications Manager 8.5 Cisco Unified Communications Manager 8.0(3a)su3 Cisco Unified Communications Manager 8.0(3a)su3 Cisco Unified Communications Manager 8.0(3a)SU2 Cisco Unified Communications Manager 8.0(3a)su1 Cisco Unified Communications Manager 8.0(3a) Cisco Unified Communications Manager 8.0(3) Cisco Unified Communications Manager 8.0(2C)Su1 Cisco Unified Communications Manager 8.0(2C) Cisco Unified Communications Manager 8.0(0.98000.106) Cisco Unified Communications Manager 7.1(5b)su5 Cisco Unified Communications Manager 7.1(5b)SU4 Cisco Unified Communications Manager 7.1(5b)su3 Cisco Unified Communications Manager 7.1(5b)SU2 Cisco Unified Communications Manager 7.1(5B) Cisco Unified Communications Manager 7.1(5A) Cisco Unified Communications Manager 7.1(5)Su1a Cisco Unified Communications Manager 7.1(5)Su1 Cisco Unified Communications Manager 7.1(5) Cisco Unified Communications Manager 7.1(3b)su2 Cisco Unified Communications Manager 7.1(3b)su1 Cisco Unified Communications Manager 7.1(3B) Cisco Unified Communications Manager 7.1(3A)Su1a Cisco Unified Communications Manager 7.1(3a)su1 Cisco Unified Communications Manager 7.1(3A) Cisco Unified Communications Manager 7.1(3) Cisco Unified Communications Manager 7.1(2B)Su1 Cisco Unified Communications Manager 7.1(2B) Cisco Unified Communications Manager 7.1(2a)su1 Cisco Unified Communications Manager 7.1(2A) Cisco Unified Communications Manager 7.1(2) Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 7.0(3g) Cisco Unified Communications Manager 7.0(2a)SU3 Cisco Unified Communications Manager 7.0(2a)SU3 Cisco Unified Communications Manager 7.0(2A)Su2 Cisco Unified Communications Manager 7.0(2a)su1 Cisco Unified Communications Manager 7.0(2A) Cisco Unified Communications Manager 7.0(2) Cisco Unified Communications Manager 7.0(1)Su1a Cisco Unified Communications Manager 7.0(1)Su1 Cisco Unified Communications Manager 7.0
Not Vulnerable:

Cisco Unified Communications Manager CVE-2013-4869 Information Disclosure Vulnerability

Cisco Unified Communications Manager is prone to an information-disclosure vulnerability.

A context-dependent attacker can exploit this issue to obtain potentially sensitive information. This may aid in further attacks.

This issue is being tracked by Cisco BugIds CSCsc69187 and CSCui01756.

Cisco Unified Communications Manager CVE-2013-4869 Information Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco Unified Communications Manager CVE-2013-4869 Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager CVE-2013-4869 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Multiple Vulnerabilities in Cisco Unified Communications Manager (Cisco)