Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Unity Connection 目录遍历漏洞
Vulnerability Description
Cisco Unity Connection（UC）是美国思科（Cisco）公司的一套语音留言平台。该平台可利用语音命令，以“免提”方式拨打电话或者收听留言。 Cisco Unity Connection的messaging API存在目录遍历漏洞，该漏洞源于程序没有充分过滤用户输入和文件类型。远程攻击者可利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A