VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 13, 2021· Updated Jun 17, 2026

CVE-2021-1226

CVE-2021-1226

Description

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

22
  • Cisco Systems, Inc./Emergency Responder6 versions
    cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*range: >=12.5\(1\),<12.5\(1\)su3
    • cpe:2.3:a:cisco:emergency_responder:10.5\(2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:emergency_responder:11.5\(1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:emergency_responder:12.0\(1\):*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: n/a
  • Cisco Systems, Inc./Prime License Manager3 versions
    cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*range: >=11.5\(1\),<11.5\(1\)su9
    • cpe:2.3:a:cisco:prime_license_manager:10.5\(2\):*:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Unified Communications Manager5 versions
    cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*+ 4 more
    • cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*range: >=11.5\(1\),<11.5\(1\)su9
    • cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*range: >=11.5\(1\),<11.5\(1\)su9
    • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\):*:*:*:-:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:10.5\(2\):*:*:*:session_management:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Unified Communications Manager Im \& Presence Service3 versions
    cpe:2.3:a:cisco:unified_communications_manager_im_\&_presence_service:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:unified_communications_manager_im_\&_presence_service:*:*:*:*:*:*:*:*range: >=11.5\(1\),<11.5\(1\)su9
    • cpe:2.3:a:cisco:unified_communications_manager_im_\&_presence_service:10.5\(2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager_im_\&_presence_service:12.0\(1\):*:*:*:*:*:*:*
  • Cisco Systems, Inc./Unity Connection3 versions
    cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*range: >=11.5\(1\),<11.5\(1\)su9
    • cpe:2.3:a:cisco:unity_connection:10.5\(2\):*:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Cisco Unified Communications Manager Session Management Editionllm-fuzzy
  • Cisco Systems, Inc./Unified Communications Manager Im And Presence Servicellm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.