CVE-2012-0366 Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
HighCVSS 9.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unity connection | <= 7.1\(3b\)su1 | No fix listed |
| cisco unity connection | = 1.1 | No fix listed |
| cisco unity connection | = 1.1(1) | No fix listed |
| cisco unity connection | = 1.1(1)_es1 | No fix listed |
| cisco unity connection | = 1.1(1)_es12 | No fix listed |
| cisco unity connection | = 1.1(1)_sr1 | No fix listed |
| cisco unity connection | = 1.2 | No fix listed |
| cisco unity connection | = 1.2(1) | No fix listed |
| cisco unity connection | = 1.2(1)_es65 | No fix listed |
| cisco unity connection | = 1.2(1)sr2 | No fix listed |
| cisco unity connection | = 2.0 | No fix listed |
| cisco unity connection | = 2.0(1) | No fix listed |
| cisco unity connection | = 2.1 | No fix listed |
| cisco unity connection | = 2.1(1) | No fix listed |
| cisco unity connection | = 2.1(2) | No fix listed |
| cisco unity connection | = 2.1(3) | No fix listed |
| cisco unity connection | = 2.1(3b)su1 | No fix listed |
| cisco unity connection | = 2.1(4) | No fix listed |
| cisco unity connection | = 2.1(4)su1 | No fix listed |
| cisco unity connection | = 2.1(4a) | No fix listed |
| cisco unity connection | = 2.1(4a)su2 | No fix listed |
| cisco unity connection | = 2.1(5) | No fix listed |
| cisco unity connection | = 2.1(5)su1 | No fix listed |
| cisco unity connection | = 2.1(5)su2 | No fix listed |
| cisco unity connection | = 2.1(5)su3 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unity connection | = 6.1(3b)su1 | No fix listed |
| cisco unity connection | = 7.0 | No fix listed |
| cisco unity connection | = 7.0(2) | No fix listed |
| cisco unity connection | = 7.0(2a)su2 | No fix listed |
| cisco unity connection | = 7.0(2a)su3 | No fix listed |
| cisco unity connection | = 7.1 | No fix listed |
| cisco unity connection | = 7.1(2) | No fix listed |
| cisco unity connection | = 7.1(2a) | No fix listed |
| cisco unity connection | = 7.1(2a)su1 | No fix listed |
| cisco unity connection | = 7.1(2b) | No fix listed |
| cisco unity connection | = 7.1(2b)su1 | No fix listed |
| cisco unity connection | = 7.1(3) | No fix listed |
| cisco unity connection | = 7.1(3a) | No fix listed |
| cisco unity connection | = 7.1(3a)su1 | No fix listed |
| cisco unity connection | = 7.1(3a)su1a | No fix listed |
| cisco unity connection | = 7.1(3b) | No fix listed |
| cisco unity connection | = 7.1(5) | No fix listed |
| cisco unity connection | = 7.1(5)su1a | No fix listed |
| cisco unity connection | = 7.1(5a) | No fix listed |
| cisco unity connection | = 7.1(5b) | No fix listed |
| cisco unity connection | = 7.1(5b)su2 | No fix listed |
| cisco unity connection | = 7.1(5b)su3 | No fix listed |
| cisco unity connection | = 7.1(5b)su4 | No fix listed |
References
- 20120229 Multiple Vulnerabilities in Cisco Unity Connection vendor-advisory