A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to perform a timing attack. This vulnerability is due to insufficient protection of a system password. An attacker could exploit this vulnerability by observing the time it takes the system to respond to various queries. A successful exploit could allow the attacker to determine a sensitive system password.
History

Fri, 01 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2022-07-06T20:30:12.728717Z

Updated: 2024-11-01T19:00:48.140Z

Reserved: 2021-11-02T00:00:00

Link: CVE-2022-20752

cve-icon Vulnrichment

Updated: 2024-08-03T02:24:49.510Z

cve-icon NVD

Status : Modified

Published: 2022-07-06T21:15:11.387

Modified: 2024-11-21T06:43:28.820

Link: CVE-2022-20752

cve-icon Redhat

No data.