CVEvulnerability

CVE-2004-1322

7.5 HIGH Published 2004-12-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-12-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

Affected configurations

• cisco unity server 2.0 • cisco unity server 2.1 • cisco unity server 2.2 • cisco unity server 2.3 • cisco unity server 2.4 • cisco unity server 2.46 • cisco unity server 3.0 • cisco unity server 3.1 • cisco unity server 3.2 • cisco unity server 3.3 • cisco unity server 4.0

References

http://www.ciac.org/ciac/bulletins/p-060.shtml Patch, Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml Patch, Vendor Advisory
http://www.securityfocus.com/bid/11954 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18489 exchange.xforce.ibmcloud.com
http://www.ciac.org/ciac/bulletins/p-060.shtml Patch, Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml Patch, Vendor Advisory
http://www.securityfocus.com/bid/11954 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18489 exchange.xforce.ibmcloud.com