SynopsisThe remote device is affected by a man-in-the-middle (MitM) information disclosure vulnerability known as POODLE.
DescriptionAccording to its self-reported version, the remote Cisco Unified Communications Manager (CUCM) device is affected by a man-in-the-middle (MitM) information disclosure vulnerability known as POODLE. The vulnerability is due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining (CBC) mode. A MitM attacker can decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a victim application to repeatedly send the same data over newly created SSL 3.0 connections.
SolutionApply the relevant patch referenced in the Cisco bug advisory.