CSCvo93883 - Cisco Unified Contact Center Express Privilege Escalation Vulnerability

[stuartbedale]

Hi all

The Cisco bug (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo93883) suggests this is fixes in 11.6(2)ES5, but it also references the Cisco security notice (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-privesc-Zd7bvwyf) that says this will be fixed in ES6, which is not yet available.  ES5 came out in Sep 2019, but the Security notice is Feb 2020 at the earliest. 

Cisco needs to update the bug, or the Security notice.

And if ES6 i to be released, is there a revised release date as it states end April 2020?

Thanks

[Wes Sisk]

To the best of my knowledge, it is resolved in ES6 which will be released in the future. I requested a review of the bug and security advisory for potential update.