Cisco Unity Connection Open Redirect Vulnerability

An open redirect vulnerability has been identified in the web-based management interface of Cisco Unity Connection. This vulnerability allows an unauthenticated, remote attacker to redirect a user to a malicious web page. The issue arises from improper input validation of HTTP request parameters. Exploitation of this vulnerability requires persuading a user to click a crafted link.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of users to malicious web pages.

Remediation

Cisco has released software updates to address this vulnerability. Users should upgrade to the fixed releases indicated in the Cisco Security Advisory cisco-sa-unity-vulns-n2EJSbbw.