漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the existence of a user account that has an undocumented, hard-coded password. An attacker could exploit this vulnerability by using the hard-coded credentials to subscribe to the Finesse Notification Service, which would allow the attacker to receive notifications when an agent signs in or out of the Finesse Desktop, when information about an agent changes, or when an agent's state changes. Cisco Bug IDs: CSCvc08314.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Cisco Unified Contact Center Enterprise 信息泄露漏洞
Vulnerability Description
Cisco Unified Contact Center Enterprise(UCCE)是美国思科（Cisco）公司的一套基于IP的联系中心组件。该组件在IP基础设施上提供了智能联系路由、呼叫处理、网络到桌面计算机电话集成（CTI）和多通道联系管理功能。 Cisco UCCE 11.5(1)版本和11.6(1)版本中的Cisco Finesse Notification Service存在安全漏洞，该漏洞源于用户账户使用硬编码密码。远程攻击者可利用该漏洞检索信息。
CVSS Information
N/A
Vulnerability Type
N/A