CVE-2008-4545 Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sen...
MediumCVSS 4.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unity | <= 4.2\(1\) | No fix listed |
| cisco unity | <= 5.0\(1\) | No fix listed |
| cisco unity | <= 7.0\(2\) | No fix listed |
| cisco unity | = 4.0 | No fix listed |
| cisco unity | = 4.0(1) | No fix listed |
| cisco unity | = 4.0(2) | No fix listed |
| cisco unity | = 4.0(3) | No fix listed |
| cisco unity | = 4.0(3)-sr2 | No fix listed |
| cisco unity | = 4.0(4) | No fix listed |
| cisco unity | = 4.0(4)-sr1 | No fix listed |
| cisco unity | = 4.0(5) | No fix listed |
| cisco unity | = 4.1(1) | No fix listed |
| cisco unity | = 5.0 | No fix listed |
| cisco unity | = 7.0 | No fix listed |
References
- 32187 third-party-advisory vendor-advisory
- 1021022 vdb-entry
- 20081008 VoIPshield Reported Vulnerabilities in Cisco Unity Server vendor-advisory
- 31642 vdb-entry
- www.voipshield.com
- ADV-2008-2771 vdb-entry
- unityserver-reports-information-disclosure(45742) vdb-entry