A vulnerability has been reported in Cisco products, which can be exploited by malicious users to bypass certain security restrictions, disclose certain sensitive information, and manipulate certain data.

The vulnerability is caused due to an unspecified error and can be exploited by Windows Active Directory users to e.g. view Web View report information for any call center instance or gain access to the Web Admin tool.

The vulnerability is reported in the following products:
* Cisco Unified Intelligent Contact Management Enterprise (Unified ICME)
* Cisco Unified ICM Hosted (Unified ICMH)
* Cisco Unified Contact Center Enterprise (UCCE)
* Cisco Unified Contact Center Hosted (UCCH)
* Cisco System Unified Contact Center Enterprise (SUCCE)

Solution
Apply updates (see vendor's advisory for details).
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20071017-IPCC.shtml

Deep Links
Links available to Secunia VIM customers