Open redirect

2016-10-0521:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.8%

JSON

The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to create user accounts by visiting an unspecified web page, aka Bug IDs CSCuy75027 and CSCuy81653.

CPENameOperatorVersion
unified_contact_center_expresseq10.1.0
unified_contact_center_expresseq10.51.0
unified_contact_center_expresseq10.61.0
unified_contact_center_expresseq11.1.0
unified_intelligence_centereq9.11.0
unified_intelligence_centereq8.5.4
unified_intelligence_centereq9.2.0

Name	Operator	Version
unified_contact_center_express	eq	10.1.0
unified_contact_center_express	eq	10.51.0
unified_contact_center_express	eq	10.61.0
unified_contact_center_express	eq	11.1.0
unified_intelligence_center	eq	9.11.0
unified_intelligence_center	eq	8.5.4
unified_intelligence_center	eq	9.2.0