Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Unified Contact Center Express 信息泄露漏洞
Vulnerability Description
Cisco Unified Contact Center Express(Unified CCX)是美国思科(Cisco)公司的一款统一通信解决方案中的客户关系管理组件。该组件集坐席应用和自助语音服务于一身,并提供呼叫分配、客户访问控制等功能。 Cisco Unified Contact Center Express (又名Unified CCX)中的脚本编辑器中存在漏洞,该漏洞源于程序没有正确管理匿名登录账户的权限。远程攻击者可通过访问脚本库目录利用该漏洞读取任意脚本。
CVSS Information
N/A
Vulnerability Type
N/A