A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affected Releases: 10.6(1). Known Fixed Releases: 11.5(1.10000.61).
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unified_contact_center_express | Cisco | 11.5(1) (including) | 11.5(1) (including) |
| Unified_contact_center_express | Cisco | 11.5.1es01 (including) | 11.5.1es01 (including) |
| Unified_contact_center_express | Cisco | 11.5.1su1 (including) | 11.5.1su1 (including) |