CVE:CVE-2011-1643
CNNVD:CNNVD-201108-446
Cisco Unified Communications Manager是企业级IP电话呼叫处理系统。
Cisco Unified Communications Manager 6.x，7.1(5b)su4之前的7.x版本，8.0，8.5(1)su2之前的8.5版本和Presence Server 6.x，7.x，8.0，8.5xnr之前的8.5版本中存在信息泄露漏洞。由于Cisco Unified Communications Manager和Cisco Unified Presence Server包含开发的查询接口，未经验证的远程攻击者可通过SSL会话连接此查询接口泄露下层数据库中的数据。
solution:Upgrade cisco unified_communications_manager to a higher version than 6.0,6.1(1,6.1(1a,6.1(1b,6.1(2,6.1(2su1,6.1(2su1a,6.1(3,6.1(3a,6.1(3b,6.1(3bsu1,6.1(4,6.1(4su1,6.1(4a,6.1(4asu2,6.1(5,6.1(5su1,6.1(5su2,7.0(1su1,7.0(1su1a,7.0(2,7.0(2a,7.0(2asu1,7.0(2asu2,7.1(2a,7.1(2asu1,7.1(2b,7.1(2bsu1,7.1(3,7.1(3a,7.1(3asu1,7.1(3asu1a,7.1(3b,7.1(3bsu1,7.1(3bsu2,7.1(5,7.1(5su1,7.1(5su1a,7.1(5a,7.1(5b,7.1(5bsu1,7.1(5bsu1a,7.1(5bsu2,7.1(5bsu3,8.0,8.5,8.5(1,8.5(1su1,and avoid the version 6.0,6.1(1),6.1(1a),6.1(1b),6.1(2),6.1(2)su1,6.1(2)su1a,6.1(3),6.1(3a),6.1(3b),6.1(3b)su1,6.1(4),6.1(4)su1,6.1(4a),6.1(4a)su2,6.1(5),6.1(5)su1,6.1(5)su2,7.0(1)su1,7.0(1)su1a,7.0(2),7.0(2a),7.0(2a)su1,7.0(2a)su2,7.1(2a),7.1(2a)su1,7.1(2b),7.1(2b)su1,7.1(3),7.1(3a),7.1(3a)su1,7.1(3a)su1a,7.1(3b),7.1(3b)su1,7.1(3b)su2,7.1(5),7.1(5)su1,7.1(5)su1a,7.1(5a),7.1(5b),7.1(5b)su1,7.1(5b)su1a,7.1(5b)su2,7.1(5b)su3,8.0,8.5,8.5(1),8.5(1)su1; Upgrade cisco unified_presence_server to a higher version than 6.0(1,6.0(2,6.0(3,6.0(4,6.0(5,6.0(6,6.0(7,7.0(1,7.0(2,7.0(3,7.0(4,7.0(5,7.0(6,7.0(7,7.0(8,7.0(9,8.0,8.5,8.5(1,8.5(2,8.5(3,and avoid the version 6.0(1),6.0(2),6.0(3),6.0(4),6.0(5),6.0(6),6.0(7),7.0(1),7.0(2),7.0(3),7.0(4),7.0(5),7.0(6),7.0(7),7.0(8),7.0(9),8.0,8.5,8.5(1),8.5(2),8.5(3)