CVE-2008-2062

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/30848Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/29935Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020361Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1933/referencesPermissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/43355Third Party Advisory, VDB Entry
http://secunia.com/advisories/30848Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/29935Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020361Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1933/referencesPermissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/43355Third Party Advisory, VDB Entry

Timeline

Published: Jun 26, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008