CVE-2008-4545

Cisco Unity < 4.2(1)ES161, < 5.0(1)ES53, < 7.0(2)ES8 - Sensitive Information Exposure via Weak Directory Permissions

Title source: llm

Description

Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory.

References (7)

Core 7

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32187

Various Sources x_refsource_misc

http://www.voipshield.com/research-details.php?id=130

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/31642

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/45742

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1021022

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2771

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html

Scores

EPSS 0.0118

EPSS Percentile 64.4%

Details

CWE

CWE-264

Status published

Products (10)

cisco/unity 4.0

cisco/unity 4.0\(1\)

cisco/unity 4.0\(2\)

cisco/unity 4.0\(3\) (2 CPE variants)

cisco/unity 4.0\(4\) (2 CPE variants)

cisco/unity 4.0\(5\)

cisco/unity 4.1\(1\)

cisco/unity 5.0

cisco/unity 7.0

cisco/unity < 4.2\(1\)

Published Oct 13, 2008

Tracked Since Feb 18, 2026