ID de Prueba:	1.3.6.1.4.1.25623.1.0.809089
Categoría:	CISCO
Título:	Cisco Jabber STARTTLS Downgrade Vulnerability - Windows
Resumen:	Cisco Jabber is prone to STARTTLS downgrade vulnerability.
Descripción:	Summary: Cisco Jabber is prone to STARTTLS downgrade vulnerability. Vulnerability Insight: The flaw is due to the client does not verify that an Extensible Messaging and Presence Protocol (XMPP) connection has been established with Transport Layer Security (TLS). Vulnerability Impact: Successful exploitation of this vulnerabilitywill allow an attacker to cause the client to establish a cleartext XMPP connection. Affected Software/OS: Cisco Jabber versions 10.6(2) before 10.6(7), 11.1.x before 11.1(3), 11.5.x before 11.5(1) and 9.7(5) before 9.7(7). Solution: Upgrade to 10.6(7) or 11.1(3) or 11.5(1) or 9.7(7) or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6409 BugTraq ID: 79678 http://www.securityfocus.com/bid/79678 Cisco Security Advisory: 20151224 Cisco Jabber for Windows STARTTLS Downgrade Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf http://www.securitytracker.com/id/1034540
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.