CVE-2017-6626

CVE-2017-6626 is a medium-severity vulnerability affecting Cisco Unified Contact Center Enterprise (UCCE) versions 11.5(1) and 11.6(1). It allows an unauthenticated, remote attacker to retrieve sensitive agent information from the Finesse Notification Service due to a hard-coded password for an undocumented user account. Exploitation involves using these credentials to subscribe to the service, granting access to agent login/logout, state changes, and other updates. While the CVSS score is 5.3, indicating a moderate risk with low attack complexity and no user interaction, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion.