CVE-2016-6464
HighSummary
A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted.
Risk Assessment
An attacker could gain access to sensitive information, potentially leading to further attacks or breaches of user privacy.
Recommendation
It is recommended to upgrade to version 11.5(1.12000.2) or 12.0(0.98000.181) to mitigate this vulnerability.
Other vulnerabilities in Cisco Unified Communications Manager IM and Presence Service
Original NVD description (English source)
A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(1.12000.2) 12.0(0.98000.181).