Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Unity 会话拒绝服务攻击漏洞
Vulnerability Description
Cisco Unity是一个语音和统一的消息平台。 Cisco Unity中存在多个安全漏洞，恶意用户可能泄露敏感信息、导致拒绝服务或注入恶意脚本。 Unity服务器的会话管理是有限的，这允许恶意用户耗尽所有可用的会话造成拒绝服务攻击。成功利用这个漏洞要求Unity服务器配置了匿名认证(非默认)。
CVSS Information
N/A
Vulnerability Type
N/A