PT-2006-3145 · Cisco · Cisco Unity Express

Publicado 2006-05-04 · Atualizado 2018-10-30 · CVE-2006-2166

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:N/AC:H/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unity Express versions 2.2(2) and earlier

Description The issue affects the HTTP management interface, allowing remote authenticated attackers to reset the password for any user with an expired password when running on any CUE Advanced Integration Module (AIM) or Network Module (NM).

Recommendations For Cisco Unity Express versions 2.2(2) and earlier, consider restricting access to the HTTP management interface until a fix is available. As a temporary workaround, monitor user password expiration and reset processes closely to minimize potential exploitation.

Correção

Identificadores relacionados

CVE-2006-2166

Produtos afetados

Cisco Unity Express

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/26165 · Nota
• http://secunia.com/advisories/19881 · Aviso do Fabricante
• http://osvdb.org/25165 · Nota
• http://securityfocus.com/bid/17775 · Nota
• http://securitytracker.com/id?1016015 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2166 · Nota de Segurança
• http://cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1613 · Nota