Vulnerability in Cisco Unity Connection

CVE-2012-0366

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

EPSS: 0.023 (81.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Unity_connection — versions 1.1, 1.1\(1\), 1.1\(1\)_es1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)