Unscored CVE-2014-8000 EUVD-2014-7849GHSA-77r7-pcg8-vjjh

Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on whet…

Published Nov 21, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCur63497.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=36467
20141119 Cisco Unified Communications Manager IM and Presence Service Enumeration Vulnerability vendor-advisory
62558 third-party-advisory
71173 vdb-entry
1031240 vdb-entry
cisco-ucm-cve20148000-info-disc(98786) vdb-entry