Threats tagged 'ghsa-w3hc-3vf9-xjj9'

A critical vulnerability in Cisco Unified Contact Center Express (CCX) Editor allows unauthenticated remote attackers to bypass authentication and gain administrative permissions for script creation and execution. The flaw arises from improper authentication in communication between the CCX Editor and the Unified CCX server, enabling attackers to redirect authentication to a malicious server. Successful exploitation permits arbitrary script creation and execution on the server as an internal non-root user.