CVE-2015-4218

The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2015-06-24

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Jabber (Cisco)

References

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39494
• http://www.securityfocus.com/bid/75377
• http://www.securitytracker.com/id/1032711