CVE:CVE-2007-5539
CNNVD:CNNVD-200710-322
Cisco Unified Communications Manager(CUCM，之前被称为CallManager)是Cisco IP电话解决方案中的呼叫处理组件。
CUCM产品中的Cisco Unified ICME、Unified ICMH、UCCE、UCCH和SUCCE Web管理组件存在漏洞，允许任意Windows活动目录域中所定义的用户获得非授权的权限级别，这允许Windows活动目录用户能够查看任意呼叫中心的Web View报表信息。Cisco SUCCE也受非授权访问Web Admin工具的影响，导致能够更改应用程序配置，包括编辑应用程序权限。
solution:Upgrade cisco unified_contact_center_enterprise to a higher version than *,7.1(5,and avoid the version 7.1(5); Upgrade cisco unified_contact_center_hosted to a higher version than *; Upgrade cisco unified_icm_hosted to a higher version than *; Upgrade cisco unified_intelligent_contact_management_enterprise to a higher version than *