CVE:CVE-2010-4305
CNNVD:CNNVD-201011-241
Cisco Unified Videoconferencing 是思科统一通信系统的一个组成部分，适用于需要一个可靠、便于管理、经济有效的网络基础设施，来进行视频会议应用部署的机构和电信运营商。
Cisco Unified Videoconferencing(UVC)System 3545，5110，5115和5230；Unified Videoconferencing 3527 Primary Rate Interface(PRI)Gateway；Unified Videoconferencing 3522 Basic Rate Interfaces(BRI)Gateway；以及Unified Videoconferencing 3515 Multipoint Control Unit(MCU)的web接口证书不能合理的使用cookie。远程攻击者通过读取(1)明文或者(2)base64编码的明文cookie获取敏感信息。
solution:Upgrade cisco unified_videoconferencing_system_5110_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5115_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5110 to a higher version than *; Upgrade cisco unified_videoconferencing_system_5115 to a higher version than *; Upgrade cisco unified_videoconferencing_system_3515_multipoint_control_unit_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3522_basic_rate_interface_gateway_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3527_primary_rate_interface_gateway_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3545_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_5230_firmware to a higher version than 7.0.1.13.3,and avoid the version 7.0.1.13.3; Upgrade cisco unified_videoconferencing_system_3515_multipoint_control_unit to a higher version than *; Upgrade cisco unified_videoconferencing_system_3522_basic_rate_interface_gateway to a higher version than *; Upgrade cisco unified_videoconferencing_system_3527_primary_rate_interface_gateway to a higher version than *; Upgrade cisco unified_videoconferencing_system_3545 to a higher version than *; Upgrade cisco unified_videoconferencing_system_5230 to a higher version than *