| Package | Affected versions | Patched versions |
|---|---|---|
| telepresence system software | = 1.10.0= 1.10.0(259)= 1.10.1= 1.10.1(43)= 1.10.2(42)= 1.10.3(41)= 1.2.3(1101)= 1.3.2(1393)= 1.4.7(2229)= 1.5.1(2082)= 1.5.10(3648)= 1.5.11(3659)= 1.5.12(3701)= 1.5.13(3717)= 1.5.3(2115)= 1.6.0(3954)= 1.6.2(4023)= 1.6.3(4042)= 1.6.4(4072)= 1.6.5(4097)= 1.6.6(4109)= 1.6.7(4212)= 1.6.8(4222)= 1.7.0.1(4764)= 1.7.0.2(4719)= 1.7.1(4864)= 1.7.2(4937)= 1.7.2.1(2)= 1.7.4(270)= 1.7.5(42)= 1.7.6(4)= 1.8.0(55)= 1.8.1(34)= 1.8.2(11)= 1.8.3(4)= 1.8.4(13)= 1.8.5(4)= 1.9.0(46)= 1.9.0.1(3)= 1.9.1(68)= 1.9.2= 1.9.2(19)= 1.9.3= 1.9.3(44)= 1.9.4= 1.9.4(19)= 1.9.5= 1.9.5(7)= 1.9.6= 1.9.6(2)= 1.9.6.1(3)= 4.0.0= 6.0.0.1(4)= 6.0.1(50)= 6.0.2(28)= 6.0.3(33)= 6.0.4(11)≤ 6.0.5\(5\) |
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free