Guest

Preview Tool

Cisco Bug: CSCum77005 - CUCDM Admin Information Disclosure Vulnerability

Last Modified

Feb 01, 2017

Products (1)

  • Cisco Hosted Collaboration Solution (HCS)

Known Affected Releases

8.1(2)

Description (partial)

Symptom:
The CUCDM Admin GUI contains a vulnerability that may allow an attacker to access information about users and users group

This issue was reported to Cisco by Fatih Ozavci from Sense of Security

Conditions:
The attacker needs to be authenticated at least as Location Admin in order to perform this attack.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.