CVE:CVE-2008-4545
CNNVD:CNNVD-200810-185
Cisco Unity是一个语音和统一的消息平台。
Cisco Unity中存在多个安全漏洞，恶意用户可能泄露敏感信息、导致拒绝服务或注入恶意脚本。
Unity服务器没有对\CommServer\Reports设置安全的权限，域用户可以获得敏感信息。
solution:Upgrade cisco unity to a higher version than 4.2\(1\,5.0\(1\,7.0\(2\,4.0,4.0(1,4.0(2,4.0(3,4.0(3:sr2,4.0(4,4.0(4:sr1,4.0(5,4.1(1,5.0,7.0,and avoid the version (,4.2\(1\)],(,5.0\(1\)],(,7.0\(2\)],4.0,4.0(1),4.0(2),4.0(3),4.0(3):sr2,4.0(4),4.0(4):sr1,4.0(5),4.1(1),5.0,7.0