CVE-2012-0366: Critical severity Cisco Unity Connection vulnerability
Published Mar 1, 2012
·Updated
Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
Affected Software
48 affected components
Cisco Unity Connection<=7.1\(3b\)su1
Cisco Unity Connection=1.1
Cisco Unity Connection=1.1\(1\)
Cisco Unity Connection=1.1\(1\)_es1
Cisco Unity Connection=1.1\(1\)_es12
Cisco Unity Connection=1.1\(1\)_sr1
Cisco Unity Connection=1.2
Cisco Unity Connection=1.2\(1\)
Cisco Unity Connection=1.2\(1\)_es65
Cisco Unity Connection=1.2\(1\)sr2
Cisco Unity Connection=2.0
Cisco Unity Connection=2.0\(1\)
Cisco Unity Connection=2.1
Cisco Unity Connection=2.1\(1\)
Cisco Unity Connection=2.1\(2\)
Cisco Unity Connection=2.1\(3\)
Cisco Unity Connection=2.1\(3b\)su1
Cisco Unity Connection=2.1\(4\)
Cisco Unity Connection=2.1\(4\)su1
Cisco Unity Connection=2.1\(4a\)
Cisco Unity Connection=2.1\(4a\)su2
Cisco Unity Connection=2.1\(5\)
Cisco Unity Connection=2.1\(5\)su1
Cisco Unity Connection=2.1\(5\)su2
Cisco Unity Connection=2.1\(5\)su3
Cisco Unity Connection=6.1\(3b\)su1
Cisco Unity Connection=7.0
Cisco Unity Connection=7.0\(2\)
Cisco Unity Connection=7.0\(2a\)su2
Cisco Unity Connection=7.0\(2a\)su3
Cisco Unity Connection=7.1
Cisco Unity Connection=7.1\(2\)
Cisco Unity Connection=7.1\(2a\)
Cisco Unity Connection=7.1\(2a\)su1
Cisco Unity Connection=7.1\(2b\)
Cisco Unity Connection=7.1\(2b\)su1
Cisco Unity Connection=7.1\(3\)
Cisco Unity Connection=7.1\(3a\)
Cisco Unity Connection=7.1\(3a\)su1
Cisco Unity Connection=7.1\(3a\)su1a
Cisco Unity Connection=7.1\(3b\)
Cisco Unity Connection=7.1\(5\)
Cisco Unity Connection=7.1\(5\)su1a
Cisco Unity Connection=7.1\(5a\)
Cisco Unity Connection=7.1\(5b\)
Cisco Unity Connection=7.1\(5b\)su2
Cisco Unity Connection=7.1\(5b\)su3
Cisco Unity Connection=7.1\(5b\)su4
Event History
Mar 1, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0366?
CVE-2012-0366 is classified as a medium severity vulnerability.
2
How do I fix CVE-2012-0366?
To fix CVE-2012-0366, upgrade Cisco Unity Connection to version 7.1.3b(Su2) or later.
3
Who is affected by CVE-2012-0366?
Remote authenticated users with Help Desk Administrator roles on Cisco Unity Connection versions prior to 7.1.3b(Su2) are affected by CVE-2012-0366.
4
What type of vulnerability is CVE-2012-0366?
CVE-2012-0366 is a security vulnerability that allows remote authenticated password change.
5
Is there a workaround for CVE-2012-0366?
There are currently no effective workarounds for CVE-2012-0366, the best solution is to apply the software update.