CVE-2012-0366 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2012-0366

Deferred

More Info Official Page

Source-psirt@cisco.com

Published At-01 Mar, 2012 | 01:55

Updated At-11 Apr, 2025 | 00:51

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C

CPE Matches

Cisco Systems, Inc.

>>unity_connection>>Versions up to 7.1\(3b\)su1(inclusive)

cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.1

cpe:2.3:a:cisco:unity_connection:1.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.1\(1\)

cpe:2.3:a:cisco:unity_connection:1.1\(1\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.1\(1\)_es1

cpe:2.3:a:cisco:unity_connection:1.1\(1\)_es1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.1\(1\)_es12

cpe:2.3:a:cisco:unity_connection:1.1\(1\)_es12:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.1\(1\)_sr1

cpe:2.3:a:cisco:unity_connection:1.1\(1\)_sr1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.2

cpe:2.3:a:cisco:unity_connection:1.2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.2\(1\)

cpe:2.3:a:cisco:unity_connection:1.2\(1\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.2\(1\)_es65

cpe:2.3:a:cisco:unity_connection:1.2\(1\)_es65:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>1.2\(1\)sr2

cpe:2.3:a:cisco:unity_connection:1.2\(1\)sr2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.0

cpe:2.3:a:cisco:unity_connection:2.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.0\(1\)

cpe:2.3:a:cisco:unity_connection:2.0\(1\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1

cpe:2.3:a:cisco:unity_connection:2.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(1\)

cpe:2.3:a:cisco:unity_connection:2.1\(1\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(2\)

cpe:2.3:a:cisco:unity_connection:2.1\(2\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(3\)

cpe:2.3:a:cisco:unity_connection:2.1\(3\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(3b\)su1

cpe:2.3:a:cisco:unity_connection:2.1\(3b\)su1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(4\)

cpe:2.3:a:cisco:unity_connection:2.1\(4\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(4\)su1

cpe:2.3:a:cisco:unity_connection:2.1\(4\)su1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(4a\)

cpe:2.3:a:cisco:unity_connection:2.1\(4a\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(4a\)su2

cpe:2.3:a:cisco:unity_connection:2.1\(4a\)su2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(5\)

cpe:2.3:a:cisco:unity_connection:2.1\(5\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(5\)su1

cpe:2.3:a:cisco:unity_connection:2.1\(5\)su1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(5\)su2

cpe:2.3:a:cisco:unity_connection:2.1\(5\)su2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>2.1\(5\)su3

cpe:2.3:a:cisco:unity_connection:2.1\(5\)su3:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>6.1\(3b\)su1

cpe:2.3:a:cisco:unity_connection:6.1\(3b\)su1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.0

cpe:2.3:a:cisco:unity_connection:7.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.0\(2\)

cpe:2.3:a:cisco:unity_connection:7.0\(2\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.0\(2a\)su2

cpe:2.3:a:cisco:unity_connection:7.0\(2a\)su2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.0\(2a\)su3

cpe:2.3:a:cisco:unity_connection:7.0\(2a\)su3:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1

cpe:2.3:a:cisco:unity_connection:7.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(2\)

cpe:2.3:a:cisco:unity_connection:7.1\(2\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(2a\)

cpe:2.3:a:cisco:unity_connection:7.1\(2a\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(2a\)su1

cpe:2.3:a:cisco:unity_connection:7.1\(2a\)su1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(2b\)

cpe:2.3:a:cisco:unity_connection:7.1\(2b\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(2b\)su1

cpe:2.3:a:cisco:unity_connection:7.1\(2b\)su1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(3\)

cpe:2.3:a:cisco:unity_connection:7.1\(3\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(3a\)

cpe:2.3:a:cisco:unity_connection:7.1\(3a\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(3a\)su1

cpe:2.3:a:cisco:unity_connection:7.1\(3a\)su1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(3a\)su1a

cpe:2.3:a:cisco:unity_connection:7.1\(3a\)su1a:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(3b\)

cpe:2.3:a:cisco:unity_connection:7.1\(3b\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(5\)

cpe:2.3:a:cisco:unity_connection:7.1\(5\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(5\)su1a

cpe:2.3:a:cisco:unity_connection:7.1\(5\)su1a:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(5a\)

cpe:2.3:a:cisco:unity_connection:7.1\(5a\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(5b\)

cpe:2.3:a:cisco:unity_connection:7.1\(5b\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(5b\)su2

cpe:2.3:a:cisco:unity_connection:7.1\(5b\)su2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(5b\)su3

cpe:2.3:a:cisco:unity_connection:7.1\(5b\)su3:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>unity_connection>>7.1\(5b\)su4

cpe:2.3:a:cisco:unity_connection:7.1\(5b\)su4:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc	psirt@cisco.com	Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory