CVE-2008-2053
published 2008-05-22CVE-2008-2053: Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote…
PriorityP340critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
2.96%
85.6th percentile
Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_customer_voice_portal | — | — |
| cisco | unified_customer_voice_portal | — | — |
| cisco | unified_customer_voice_portal | — | — |
| cisco | voice_portal | — | — |
CVSS provenance
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_cisco9.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Voice Portal Privilege Escalation Vulnerability
vendor_cisco·2008-05-21·CVSS 9.0
CVE-2008-2053 [CRITICAL] CWE-264 Cisco Voice Portal Privilege Escalation Vulnerability
Cisco Voice Portal Privilege Escalation Vulnerability
A vulnerability exists in the Cisco Unified Customer Voice Portal (CVP)
where an authenticated user can create, modify, or delete a superuser account.
Cisco has released software updates that address this vulnerability.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080521-cvp.
Cisco
Cisco Voice Portal Privilege Escalation Vulnerability
vendor_cisco
CVE-2008-2053 Cisco Voice Portal Privilege Escalation Vulnerability
CVE-2008-2053: Cisco Voice Portal Privilege Escalation Vulnerability
A vulnerability exists in the Cisco Unified Customer Voice Portal (CVP) where an authenticated user can create, modify, or delete a superuser account. Cisco has released software updates that address this vulnerability. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080521-cvp .
CWE: CWE-264, CWE-264
Bug IDs: CSCsj93874
GHSA
GHSA-j378-rp7m-2f6g: Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4
ghsa_unreviewed·2022-05-01
CVE-2008-2053 [HIGH] GHSA-j378-rp7m-2f6g: Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4
Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/30289http://securitytracker.com/id?1020080http://www.cisco.com/en/US/products/products_security_advisory09186a008099beae.shtmlhttp://www.securityfocus.com/bid/29315http://www.vupen.com/english/advisories/2008/1603/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42564http://secunia.com/advisories/30289http://securitytracker.com/id?1020080http://www.cisco.com/en/US/products/products_security_advisory09186a008099beae.shtmlhttp://www.securityfocus.com/bid/29315http://www.vupen.com/english/advisories/2008/1603/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42564
2008-05-22
Published