Description
Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc
Scores
EPSS
0.0228
EPSS Percentile
81.3%
Details
CWE
CWE-264
Status
published
Products (48)
cisco/unity_connection
1.1
cisco/unity_connection
1.1\(1\)
cisco/unity_connection
1.1\(1\)_es1
cisco/unity_connection
1.1\(1\)_es12
cisco/unity_connection
1.1\(1\)_sr1
cisco/unity_connection
1.2
cisco/unity_connection
1.2\(1\)
cisco/unity_connection
1.2\(1\)_es65
cisco/unity_connection
1.2\(1\)sr2
cisco/unity_connection
2.0
... and 38 more
Published
Mar 01, 2012
Tracked Since
Feb 18, 2026