CVEvulnerability

CVE-2008-4545

4.0 MEDIUM Published 2008-10-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-10-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-264

Description

Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory.

Affected configurations

• cisco unity (<= 4.2\(1\)) • cisco unity (<= 5.0\(1\)) • cisco unity (<= 7.0\(2\)) • cisco unity 4.0 • cisco unity 4.0\(1\) • cisco unity 4.0\(2\) • cisco unity 4.0\(3\) • cisco unity 4.0\(4\) • cisco unity 4.0\(5\) • cisco unity 4.1\(1\) • cisco unity 5.0 • cisco unity 7.0

Related

Weakness · not in database (1)

References