int(3508)

Vulnerability Bulletins


Aumento de privilegios en Cisco Unified Communications Web-based Management

Vulnerability classification

Property Value
Confidence level Oficial
Impact Aumento de privilegios
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Networking
Affected software Cisco Unified Intelligent Contact Management Enterprise
Cisco Unified ICM Hosted
Cisco Unified Contact Center Enterprise
Cisco Unified Contact Center Hosted
Cisco System Unified Contact Center Enterprise

Description

Se ha encontrado una vulnerabilidad en Cisco Unified Intelligent Contact Management Enterprise, Cisco Unified ICM Hosted, Cisco Unified Contact Center Enterprise, Cisco Unified Contact Center Hosted y Cisco System Unified Contact Center Enterprise. La vulnerabilidad reside en un error no especificado.

Un atacante remoto definido en el dominio Windows Active Directory podría aumentar sus privilegios y obtener acceso a la herramienta Web Admin.

Solution



Actualización de software

Cisco
Cisco Unified Intelligent Contact Management Enterprise 7.1(5) / patch ICM7.1(5)_ES46
Cisco Unified ICM Hosted 7.1(5) / patch ICM7.1(5)_ES46
Cisco Unified Contact Center Enterprise 7.1(5) / patch ICM7.1(5)_ES46
Cisco Unified Contact Center Hosted 7.1(5) / patch ICM7.1(5)_ES46
Cisco System Unified Contact Center Enterprise 7.1(5) / patch ICM7.1(5)_ES46
http://tools.cisco.com/support/downloads/go/MDFTree.x?butype=cc

Standar resources

Property Value
CVE
BID

Other resources

Cisco Security Advisory (cisco-sa-20071017-IPCC)
http://www.cisco.com/warp/public/707/cisco-sa-20071017-IPCC.shtml

Version history

Version Comments Date
1.0 Aviso emitido 2007-10-18
Ministerio de Defensa
CNI
CCN
CCN-CERT