Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2013-4869 First vendor Publication 2013-07-18
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:N)
Cvss Base Score 0 Attack Range Network
Cvss Impact Score 0 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756. NOTE: the vendor has provided a statement that the "hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4869

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-522 Insufficiently Protected Credentials (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 213

Sources (Detail)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa...
https://exchange.xforce.ibmcloud.com/vulnerabilities/85883
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
Date Informations
2024-11-28 12:36:40
  • Multiple Updates
2021-05-08 01:12:20
  • Multiple Updates
2021-05-05 01:14:01
  • Multiple Updates
2021-05-04 12:28:55
  • Multiple Updates
2021-04-22 01:35:04
  • Multiple Updates
2021-01-20 01:11:24
  • Multiple Updates
2020-12-08 21:24:05
  • Multiple Updates
2020-05-23 00:38:11
  • Multiple Updates
2018-07-10 12:01:48
  • Multiple Updates
2017-08-29 09:24:19
  • Multiple Updates
2013-08-22 17:21:01
  • Multiple Updates
2013-07-18 21:19:15
  • Multiple Updates
2013-07-18 17:18:54
  • First insertion