Skip to main content

Emergency Responder CVE-2021-1226

MEDIUM
Insertion of Sensitive Information into Log File (CWE-532)
2021-01-13 psirt@cisco.com
Cisco Information Disclosure Emergency Responder Prime License Manager Unified Communications Manager Unified Communications Manager Im Presence Service Unity Connection
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jan 13, 2021 - 22:15 nvd
MEDIUM 6.5

DescriptionNVD

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.

AnalysisAI

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM &. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-532. A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices. Affected products include: Cisco Emergency Responder, Cisco Prime License Manager, Cisco Unified Communications Manager, Cisco Unified Communications Manager Im \& Presence Service, Cisco Unity Connection.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Emergency Responder

View all
CVE-2017-12337 CRITICAL
9.8 Nov 16

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System softw
CVE-2023-20101 CRITICAL
9.8 Oct 04

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected de
CVE-2016-6468 HIGH
8.8 Dec 14

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remot
CVE-2024-20352 HIGH
8.8 Apr 03

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traver
CVE-2023-20259 HIGH
7.5 Oct 04

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, rem
CVE-2023-20266 HIGH
7.2 Aug 30

A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communica
CVE-2014-2115 MEDIUM
6.8 Apr 04

Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6
CVE-2015-6405 MEDIUM
6.8 Dec 13

Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attacker
CVE-2016-9208 MEDIUM
6.5 Dec 14

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emer
CVE-2024-20347 MEDIUM
6.5 Apr 03

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, w
CVE-2017-12227 MEDIUM
5.4 Sep 07

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacke
CVE-2018-15403 MEDIUM
5.4 Oct 05

A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified C

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all
CVE-2023-43261 HIGH POC
7.5
CVE-2025-24984 MEDIUM
4.6
CVE-2017-8075 CRITICAL POC
9.8
CVE-2017-8074 CRITICAL POC
9.8
CVE-2026-22778 CRITICAL POC
9.8
CVE-2019-17395 CRITICAL POC
9.8
CVE-2019-17398 CRITICAL POC
9.8
CVE-2019-17394 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2021-1226 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy