CVE-2002-1189

Опубликовано: 11 окт. 2002

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.

Ссылки

http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10282.php
Vendor Advisory
http://www.securityfocus.com/bid/5896
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10282.php
Vendor Advisory
http://www.securityfocus.com/bid/5896

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:cisco:unity_server:2.0:*:*:*:*:*:*:*

cpe:2.3:h:cisco:unity_server:2.1:*:*:*:*:*:*:*

cpe:2.3:h:cisco:unity_server:2.2:*:*:*:*:*:*:*

cpe:2.3:h:cisco:unity_server:2.3:*:*:*:*:*:*:*

cpe:2.3:h:cisco:unity_server:2.4:*:*:*:*:*:*:*

cpe:2.3:h:cisco:unity_server:2.46:*:*:*:*:*:*:*

cpe:2.3:h:cisco:unity_server:3.0:*:*:*:*:*:*:*

cpe:2.3:h:cisco:unity_server:3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00079

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-x457-x9j4-x27v

github

больше 3 лет назад