Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Unity Reports设置安全权限泄露漏洞
Vulnerability Description
Cisco Unity是一个语音和统一的消息平台。 Cisco Unity中存在多个安全漏洞，恶意用户可能泄露敏感信息、导致拒绝服务或注入恶意脚本。 Unity服务器没有对\CommServer\Reports设置安全的权限，域用户可以获得敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A