CVE-2012-0366

Published: Mar 1, 2012Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

Affected (48)

Products: Cisco: Unity Connection

Cisco

1 product

Unity Connection

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Cisco Unity Connection	Up to 7.1\(3b\)su1
Cisco Unity Connection	Version 1.1
Cisco Unity Connection	Version 1.1(1)
Cisco Unity Connection	Version 1.1(1)_es12
Cisco Unity Connection	Version 1.1(1)_es1
Cisco Unity Connection	Version 1.1(1)_sr1
Cisco Unity Connection	Version 1.2
Cisco Unity Connection	Version 1.2(1)
Cisco Unity Connection	Version 1.2(1)_es65
Cisco Unity Connection	Version 1.2(1)sr2
Cisco Unity Connection	Version 2.0
Cisco Unity Connection	Version 2.0(1)
Cisco Unity Connection	Version 2.1
Cisco Unity Connection	Version 2.1(1)
Cisco Unity Connection	Version 2.1(2)
Cisco Unity Connection	Version 2.1(3)
Cisco Unity Connection	Version 2.1(3b)su1
Cisco Unity Connection	Version 2.1(4)
Cisco Unity Connection	Version 2.1(4)su1
Cisco Unity Connection	Version 2.1(4a)
Cisco Unity Connection	Version 2.1(4a)su2
Cisco Unity Connection	Version 2.1(5)
Cisco Unity Connection	Version 2.1(5)su1
Cisco Unity Connection	Version 2.1(5)su2
Cisco Unity Connection	Version 2.1(5)su3
Cisco Unity Connection	Version 6.1(3b)su1
Cisco Unity Connection	Version 7.0
Cisco Unity Connection	Version 7.0(2)
Cisco Unity Connection	Version 7.0(2a)su2
Cisco Unity Connection	Version 7.0(2a)su3
Cisco Unity Connection	Version 7.1
Cisco Unity Connection	Version 7.1(2)
Cisco Unity Connection	Version 7.1(2a)
Cisco Unity Connection	Version 7.1(2a)su1
Cisco Unity Connection	Version 7.1(2b)
Cisco Unity Connection	Version 7.1(2b)su1
Cisco Unity Connection	Version 7.1(3)
Cisco Unity Connection	Version 7.1(3a)
Cisco Unity Connection	Version 7.1(3a)su1
Cisco Unity Connection	Version 7.1(3a)su1a
Cisco Unity Connection	Version 7.1(3b)
Cisco Unity Connection	Version 7.1(5)
Cisco Unity Connection	Version 7.1(5)su1a
Cisco Unity Connection	Version 7.1(5a)
Cisco Unity Connection	Version 7.1(5b)
Cisco Unity Connection	Version 7.1(5b)su2
Cisco Unity Connection	Version 7.1(5b)su3
Cisco Unity Connection	Version 7.1(5b)su4

Related CWEs

CWE-264

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.