Description
Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419.
References
- 79678 vdb-entry
- http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf
- 1034540 vdb-entry
- 20151224 Cisco Jabber for Windows STARTTLS Downgrade Vulnerability vendor-advisory