CVE:CVE-2016-1319
CNNVD:CNNVD-201602-172
Cisco Unified Communications Manager（又名CallManager）等都是美国思科（Cisco）公司的产品。CallManager是一款统一通信系统中的呼叫处理组件。Cisco Unified Communications Manager IM & Presence Service是一个基于CallManager的即时消息（IM）和状态显示平台。
多款Cisco产品中存在安全漏洞，该漏洞源于程序存储明文的加密密钥。本地攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：Cisco Unified Communications Manager 9.1(2.10000.28)版本，10.5(2.10000.5)版本，10.5(2.12901.1)版本，11.0(1.10000.10)版本，Unified Communications Manager IM &amp; Presence Service 10.5(2)版本，Unified Contact Center Express 11.0(1)版本，Unity Connection 10.5(2)版本。
solution:Upgrade sun opensolaris to a higher version than snv_124,and avoid the version snv_124; Upgrade samsung x14j_firmware to a higher version than t-ms14jakucb-1102.5,and avoid the version t-ms14jakucb-1102.5; Upgrade zyxel gs1900-10hp_firmware to a higher version than 2.50\(aazi.0\c0,and avoid the version (,2.50\(aazi.0\)c0); Upgrade zzinc keymouse_firmware to a higher version than 3.08,and avoid the version 3.08