VULNERABILITY INTELLIGENCE
CVE-2011-1643
CVSS score10 HIGH
EPSS probability1.90%
CISA KEVNot currently listed
Published2011-08-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- psirt@cisco.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory