CVE-2015-4221

Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.

• CWE-264

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39505Vendor Advisory
• http://www.securityfocus.com/bid/75401Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032716Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39505Vendor Advisory
• http://www.securityfocus.com/bid/75401Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032716Third Party Advisory, VDB Entry

Published

Jun 26, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4215Cisco Wireless LAN Controller (WLC) devices with software 7.…
• CVE-2015-4216The remote-support feature on Cisco Web Security Virtual App…
• CVE-2015-4217The remote-support feature on Cisco Web Security Virtual App…
• CVE-2015-4218The web-based user interface in Cisco Jabber through 9.6(3) …
• CVE-2015-4219Cisco Secure Access Control System before 5.4(0.46.2) and 5.…
• CVE-2015-4220Cross-site scripting (XSS) vulnerability in Cisco Unified Pr…
• CVE-2015-4222SQL injection vulnerability in Cisco Unified Communications …
• CVE-2015-4223Cisco IOS XR 5.1.3 allows remote attackers to cause a denial…
• CVE-2015-4224Cisco Wireless LAN Controller (WLC) devices with software 7.…
• CVE-2015-4225Cisco Application Policy Infrastructure Controller (APIC) 1.…
• CVE-2015-4226The packet-storing feature on Cisco 9900 phones with firmwar…
• CVE-2015-4227Memory leak in Cisco Headend System Release allows remote at…