Vulnerability in Cisco Unity Server

CVE-2004-1322

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

EPSS: 0.025 (82.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Unity_server — versions 2.0, 2.1, 2.2
N/a — versions n/a

References

cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (Patch, government-resource, Vendor Advisory, x_refsource_CIAC, third-party-advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)