CSCur23720 - CUCM evaluation of SSLv3 POODLE vulnerability - CUCM 9.1(2.10000.28)

[EulHong Cho]

Hello,

CUCM : evaluation of SSLv3 POODLE vulnerability

CSCur23720

Our customer CUCM version is CUCM 9.1(2.10000.28).

When we did 'utils web-server ssl disable' command on CUCM CLI, can we access CUCM Web interface without SSL service or not ?

If we cannot access Web, How can we further progress ?

should we upgrade fixed version ?

Could you help us ?

[Manish Gogna]

Hi EulHong,

Upgrading to the 9.1.2 ES version with the fix is recommended. You can contact TAC to get it published for you.

Manish

[EulHong Cho]

Thanks, Manish.

I will search support download from CCO before asking to TAc.

[Jaime Valencia]

The bug already lists fixed version and SU3 shows as fixed, and also the RNs show this.

You can upgrade to it and get the fix.