CVE Daily

CVE-2012-0366

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to c...

Critical CVSS 9.0

Overview

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

CWE: CWE-264 Published: 2012-03-01T01:55:01.003
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.0 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags