Cisco Unified Contact Center Express Improper API Authorization Vulnerability

A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the availability state of any agent. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by authenticating to an affected system with valid agent credentials and performing a specific API call with crafted input. A successful exploit could allow the attacker to change the availability state of an agent, potentially causing a denial of service condition.

N/A

授权机制不恰当

Cisco Unified Contact Center Express 授权问题漏洞

Cisco Unified Contact Center Express（Unified CCX）是美国思科（Cisco）公司的一款统一通信解决方案中的客户关系管理组件。该组件支持自助语音服务、呼叫分配和客户访问控制等功能。 Cisco Unified Contact Center Express 12.5(1)之前版本中存在授权问题漏洞。攻击者可通过使用有效的代理凭据进行身份验证，并使用特制的输入执行特定的API调用利用该漏洞更改代理的可用性状态，进而导致拒绝服务。

N/A

N/A