Vulnerability Details : CVE-2008-4545
Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory.
Products affected by CVE-2008-4545
- cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0\(5\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.1\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0\(2\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0\(3\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0\(4\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0\(4\):sr1:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity:4.0\(3\):sr2:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-4545
0.28%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 48 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-4545
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST |
CWE ids for CVE-2008-4545
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-4545
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/45742
-
http://www.securityfocus.com/bid/31642
-
http://www.voipshield.com/research-details.php?id=130
-
http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
Vendor Advisory
-
http://secunia.com/advisories/32187
Vendor Advisory
-
http://securitytracker.com/id?1021022
-
http://www.vupen.com/english/advisories/2008/2771
Jump to