Vulnerability in Cisco Unified Customer Voice Portal

CVE-2008-2053

Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account.

EPSS: 0.030 (86.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_customer_voice_portal — versions 4.0, 4.1, 7.0
N/a — versions n/a

References

psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch)
psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
psirt@cisco.com (vdb-entry, x_refsource_XF)
psirt@cisco.com (Patch, vdb-entry, x_refsource_SECTRACK)