WaratekVRT Sign in

CVE-2021-1226

Affected software5 products, listed below
Severity6.5 Medium CVSS 3.1 3 scores
WeaknessCWE-532
Published13 Jan 2021
Updated17 Jun 2026

Description

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.

Exploitation status

No public exploit

No exploit has been reported in the sources we check. Published 5 years ago.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment no assessment published
  • Indexed PoC none indexed
  • EPSS 0.92% chance in 30 days

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

6.5 MEDIUM v3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 3 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N NVD Primary published
CVSS 3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N psirt@cisco.com Secondary
CVSS 2.0 4.0 none AV:N/AC:L/Au:S/C:P/I:N/A:N NVD Primary

Affected software and releases

Products and versions

5 products, 16 version entries
SourceVendorProductSchemeAffected versions
nvd cisco emergency responder generic 10.5\(2\) · 11.5\(1\) · 12.0\(1\) · ≥ 12.5.1 and ＜ 12.5.1.3
nvd cisco prime license manager generic 10.5\(2\) · ≥ 11.5.1 and ＜ 11.5.1.9
nvd cisco unified communications manager generic 10.5\(2\) · ≥ 11.5.1 and ＜ 11.5.1.9
nvd cisco unified communications manager im \& presence service generic 10.5\(2\) · ≥ 11.5.1 and ＜ 11.5.1.9 · 12.0\(1\) · ≥ 12.5.1 and ＜ 12.5.1.3
nvd cisco unity connection generic 10.5\(2\) · ≥ 11.5.1 and ＜ 11.5.1.9 · ≥ 12.0.1 and ＜ 12.0.1.4 · ≥ 12.5.1 and ＜ 12.5.1.3

References

URLTags
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-logging-6QSWKRYz Vendor Advisory

Timeline
Published2021-01-13By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.