PT-2015-6510
CVE-2015-4299
·
Published
2015-08-19
·
Updated
2016-12-28
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Unified Web and E-Mail Interaction Manager version 9.0(2)
Description
The issue is related to improper authorization, allowing remote authenticated users to remove default messaging-queue system folders.
Recommendations
For Cisco Unified Web and E-Mail Interaction Manager version 9.0(2), update to a version that properly performs authorization to prevent unauthorized removal of system folders.
Found an issue in the description? Have something to add? Feel free to write us 👾