CVE-2004-1322

Published: Dec 15, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

Affected (11)

Products: Cisco: Unity Server

Cisco

1 product

Unity Server

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Cisco Unity Server	Version 2.0
Cisco Unity Server	Version 2.1
Cisco Unity Server	Version 2.2
Cisco Unity Server	Version 2.3
Cisco Unity Server	Version 2.46
Cisco Unity Server	Version 2.4
Cisco Unity Server	Version 3.0
Cisco Unity Server	Version 3.1
Cisco Unity Server	Version 3.2
Cisco Unity Server	Version 3.3
Cisco Unity Server	Version 4.0