Vulnerability Bulletins

Cisco Unified Communications Manager Web Applications Identity Management Subsystem Denial of Service Vulnerability

   
Affected software Cisco
 
A vulnerability in the Identity Management subsystem used by the WebApplications of Cisco Unified Communications Manager (Cisco UCM) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.The vulnerability is due to invalid session requests. An attacker could exploit this vulnerability by sending invalid session tokens to the subsystem of an affected system. A successful exploit could allow the attacker to cause a DoS condition for a specific

More info:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151215-ucmim?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Unified%20Communications%20Manager%20Web%20Applications%20Identity%2