CVE-2012-0366 in Unity Connection

Resumen

por MITRE

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 2012-01-04
• Divulgación: 2012-02-29
• Moderación: aceptado
• Artículo: VDB-60343
• CPE: listo
• CWE: CWE-264 (confirmado)
• CVSS: 9.0 (NVD)
• EPSS: 0.00420
• KEV: no
• Actividades: muy bajo
• Sector: Hospital, Pharma, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-0366
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0366
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-0366/