NVD

Id
40377  
Name
CVE-2013-4869  
Description
Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers" installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756. NOTE: the vendor has provided a statement that the "hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0."  
Reject
1  
CVSS Version
2  
CVSS Score
0  
Severity
Low  
CVSS Base Score
0  
CVSS Impact Subscore
0  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-07-18  
Modified Date
2013-08-22  
Seq
2013-4869  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205031 40377 CVE-2013-4869 20130717 Multiple Vulnerabilities in Cisco Unified Communications Manager  View
205032 40377 CVE-2013-4869 cucm-cve20134869-weak-security(85883)  View

Related JVN