CVE-2024-20457

MEDIUM EPSS 34.8%
Published Nov 6, 20241y ago · Modified Jun 17, 20261w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Nov 6, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of unencrypted credentials in certain logs. An attacker could exploit this vulnerability by accessing the logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to access sensitive information from the device.

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
34.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure

Affected Products 42

VendorProductVersionRange
ciscounified_communications_manager_im_and_presence_service10.0\(1\)any
ciscounified_communications_manager_im_and_presence_service10.0\(1\)su1any
ciscounified_communications_manager_im_and_presence_service10.0\(1\)su2any
ciscounified_communications_manager_im_and_presence_service10.5\(1\)any
ciscounified_communications_manager_im_and_presence_service10.5\(1\)su1any
ciscounified_communications_manager_im_and_presence_service10.5\(1\)su2any
ciscounified_communications_manager_im_and_presence_service10.5\(1\)su3any
ciscounified_communications_manager_im_and_presence_service10.5\(2\)any
ciscounified_communications_manager_im_and_presence_service10.5\(2\)su1any
ciscounified_communications_manager_im_and_presence_service10.5\(2\)su2any
ciscounified_communications_manager_im_and_presence_service10.5\(2\)su2aany
ciscounified_communications_manager_im_and_presence_service10.5\(2\)su3any
ciscounified_communications_manager_im_and_presence_service10.5\(2\)su4any
ciscounified_communications_manager_im_and_presence_service10.5\(2\)su4aany
ciscounified_communications_manager_im_and_presence_service10.5\(2a\)any
ciscounified_communications_manager_im_and_presence_service10.5\(2b\)any
ciscounified_communications_manager_im_and_presence_service11.0any
ciscounified_communications_manager_im_and_presence_service11.0\(1\)any
ciscounified_communications_manager_im_and_presence_service11.0\(1\)su1any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su1any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su2any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su3any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su3aany
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su4any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su5any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su5aany
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su6any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su7any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su8any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su9any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su10any
ciscounified_communications_manager_im_and_presence_service11.5\(1\)su11any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su1any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su2any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su3any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su4any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su5any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su6any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su7any
ciscounified_communications_manager_im_and_presence_service12.5\(1\)su8any

References 1

  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-inf-disc-cUPKuA5n
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.