CVE-2015-6409

EUVD-2015-6351
Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
ciscojabber
10.6\(2\)
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab
http://www.securityfocus.com/bid/79678
http://www.securitytracker.com/id/1034540
http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab
http://www.securityfocus.com/bid/79678
http://www.securitytracker.com/id/1034540
http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf