CVE-2012-0366

Severity

90%

Complexity

80%

Confidentiality

165%

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

CVSS 2.0 Base Score 9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C).

Overview

First reported 13 years ago

2012-03-01 01:55:00

Last updated 13 years ago

2012-03-01 05:00:00

Affected Software

Cisco Unity Connection Software 1.1

1.1

Cisco Unity Connection Software 1.1(1)

1.1\(1\)

Cisco Unity Connection Software 1.1(1)_ES1

1.1\(1\)_es1

Cisco Unity Connection Software 1.1(1)_ES12

1.1\(1\)_es12

Cisco Unity Connection Software 1.1(1)_SR1

1.1\(1\)_sr1

Cisco Unity Connection Software 1.2

1.2

Cisco Unity Connection Software 1.2(1)

1.2\(1\)

Cisco Unity Connection Software 1.2(1)_ES65

1.2\(1\)_es65

Cisco Unity Connection Software 1.2(1)sr2

1.2\(1\)sr2

Cisco Unity Connection Software 2.0

2.0

Cisco Unity Connection Software 2.0(1)

2.0\(1\)

Cisco Unity Connection Software 2.1

2.1

Cisco Unity Connection Software 2.1(1)

2.1\(1\)

Cisco Unity Connection Software 2.1(2)

2.1\(2\)

Cisco Unity Connection Software 2.1(3)

2.1\(3\)

Cisco Unity Connection Software 2.1(3b)su1

2.1\(3b\)su1

Cisco Unity Connection Software 2.1(4)

2.1\(4\)

Cisco Unity Connection Software 2.1(4)su1

2.1\(4\)su1

Cisco Unity Connection Software 2.1(4a)

2.1\(4a\)

Cisco Unity Connection Software 2.1(4a)su2

2.1\(4a\)su2

Cisco Unity Connection Software 2.1(5)

2.1\(5\)

Cisco Unity Connection Software 2.1(5)su1

2.1\(5\)su1

Cisco Unity Connection Software 2.1(5)su2

2.1\(5\)su2

Cisco Unity Connection Software 2.1(5)su3

2.1\(5\)su3

Cisco Unity Connection Software 6.1(3b)su1

6.1\(3b\)su1

Cisco Unity Connection Software 7.0

7.0

Cisco Unity Connection Software 7.0(2)

7.0\(2\)

Cisco Unity Connection Software 7.0(2a)su2

7.0\(2a\)su2

Cisco Unity Connection Software 7.0(2a)su3

7.0\(2a\)su3

Cisco Unity Connection Software 7.1

7.1

Cisco Unity Connection Software 7.1(2)

7.1\(2\)

Cisco Unity Connection Software 7.1(2a)

7.1\(2a\)

Cisco Unity Connection Software 7.1(2a)su1

7.1\(2a\)su1

Cisco Unity Connection Software 7.1(2b)

7.1\(2b\)

Cisco Unity Connection Software 7.1(2b)su1

7.1\(2b\)su1

Cisco Unity Connection Software 7.1(3)

7.1\(3\)

Cisco Unity Connection Software 7.1(3a)

7.1\(3a\)

Cisco Unity Connection Software 7.1(3a)su1

7.1\(3a\)su1

Cisco Unity Connection Software 7.1(3a)su1a

7.1\(3a\)su1a

Cisco Unity Connection Software 7.1(3b)

7.1\(3b\)

Cisco Unity Connection Software

Cisco Unity Connection Software 7.1(5)

7.1\(5\)

Cisco Unity Connection Software 7.1(5)su1a

7.1\(5\)su1a

Cisco Unity Connection Software 7.1(5a)

7.1\(5a\)

Cisco Unity Connection Software 7.1(5b)

7.1\(5b\)

Cisco Unity Connection Software 7.1(5b)su2

7.1\(5b\)su2

Cisco Unity Connection Software 7.1(5b)su3

7.1\(5b\)su3

Cisco Unity Connection Software 7.1(5b)su4

7.1\(5b\)su4

References

20120229 Multiple Vulnerabilities in Cisco Unity Connection

Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.