SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability CUCM version 8.5

[Swapnil Surve]

CUCM : evaluation of SSLv3 POODLE vulnerability

CSCur23720

How can we fix this bug in CUCM version 8.5.1.10000-26 ?

[Manish Gogna]

Hi,

https://tools.cisco.com/bugsearch/bug/CSCur23720/?reffering_site=dumpcr

The bug is not fixed in any version of 8.5 or 8.6 yet. You can contact TAC to check if any special ES is available or if there is any ETA for a fix on 8.x version.

HTH
Manish

[Jitender Bhandari]

Hi

You can subscribe to the BUG below for update

https://tools.cisco.com/bugsearch/bug/CSCur38423/?referring_site=bugquickviewredir

tracking CVE-2014-3566

Last Modified:

May 24,2015 for the BUG

I doubt you will get a fix in 8.5.1 for CVE-2014-3566.

You will have to upgrade to 9.1.2.X version to get the fix.

HTH

JB