Impact Analysis

A successful exploit of this vulnerability could allow an attacker with administrative credentials to download arbitrary files from the affected system.

This could lead to unauthorized disclosure of sensitive information stored on the system.

The CVSS score of 6.5 indicates a medium severity impact, with high confidentiality impact but no impact on integrity or availability.

Useful 0 Not Useful 0

Executive Summary

This vulnerability affects Cisco Unity Connection and involves multiple security issues that allow an authenticated remote attacker to download arbitrary files from the affected system.

The attacker must have valid administrative credentials to exploit these vulnerabilities.

The root cause is improper sanitization of user input in the web-based management interface, which can be exploited by sending a specially crafted HTTPS request.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an authenticated attacker with administrative credentials to download arbitrary files from the affected system due to improper input sanitization in the web-based management interface.

Such unauthorized access to sensitive files could potentially lead to exposure of personal or protected data, which may impact compliance with data protection regulations such as GDPR or HIPAA.

However, the provided information does not explicitly describe the specific impact on compliance with these standards.

Useful 0 Not Useful 0