Test ID:	1.3.6.1.4.1.25623.1.0.809089
Category:	CISCO
Title:	Cisco Jabber STARTTLS Downgrade Vulnerability - Windows
Summary:	Cisco Jabber is prone to STARTTLS downgrade vulnerability.
Description:	Summary: Cisco Jabber is prone to STARTTLS downgrade vulnerability. Vulnerability Insight: The flaw is due to the client does not verify that an Extensible Messaging and Presence Protocol (XMPP) connection has been established with Transport Layer Security (TLS). Vulnerability Impact: Successful exploitation of this vulnerabilitywill allow an attacker to cause the client to establish a cleartext XMPP connection. Affected Software/OS: Cisco Jabber versions 10.6(2) before 10.6(7), 11.1.x before 11.1(3), 11.5.x before 11.5(1) and 9.7(5) before 9.7(7). Solution: Upgrade to 10.6(7) or 11.1(3) or 11.5(1) or 9.7(7) or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6409 BugTraq ID: 79678 http://www.securityfocus.com/bid/79678 Cisco Security Advisory: 20151224 Cisco Jabber for Windows STARTTLS Downgrade Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf http://www.securitytracker.com/id/1034540
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.