CVE-2018-0474

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could exploit this vulnerability by logging in to the Cisco Unified Communications Manager web-based management interface and viewing the source code for the configuration page. A successful exploit could allow the attacker to recover passwords and expose those accounts to further attack.

• CWE-200
• CWE-522

• http://www.securityfocus.com/bid/106538Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cucm-creds-disclosrVendor Advisory
• http://www.securityfocus.com/bid/106538Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cucm-creds-disclosrVendor Advisory

Published

Jan 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0468A vulnerability in the configuration of a local database ins…
• CVE-2018-0469A vulnerability in the web user interface of Cisco IOS XE So…
• CVE-2018-0470A vulnerability in the web framework of Cisco IOS XE Softwar…
• CVE-2018-0471A vulnerability in the Cisco Discovery Protocol (CDP) module…7.4
• CVE-2018-0472A vulnerability in the IPsec driver code of multiple Cisco I…
• CVE-2018-0473A vulnerability in the Precision Time Protocol (PTP) subsyst…
• CVE-2018-0475A vulnerability in the implementation of the cluster feature…
• CVE-2018-0476A vulnerability in the Network Address Translation (NAT) Ses…
• CVE-2018-0477A vulnerability in the CLI parser of Cisco IOS XE Software c…6.7
• CVE-2018-0480A vulnerability in the errdisable per VLAN feature of Cisco …
• CVE-2018-0481A vulnerability in the CLI parser of Cisco IOS XE Software c…6.7
• CVE-2018-0482A vulnerability in the web-based management interface of Cis…5.4