CVE-2008-3814

2008-10-0822:00:01

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

78.1%

JSON

Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once.

Affected configurations

Nvd

Node

ciscounityMatch4.0

ciscounityMatch4.0\(1\)

ciscounityMatch4.0\(2\)

ciscounityMatch4.0\(3\)

ciscounityMatch4.0\(3\)sr1

ciscounityMatch4.0\(4\)

ciscounityMatch4.0\(4\)sr1

ciscounityMatch4.0\(5\)

ciscounityMatch4.1\(1\)

ciscounityMatch4.2\(1\)

ciscounityMatch5.0

ciscounityMatch5.0\(1\)

ciscounityMatch7.0

ciscounityMatch7.0\(2\)

VendorProductVersionCPE
ciscounity4.0cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*
ciscounity4.0(1)cpe:2.3:a:cisco:unity:4.0\(1\):*:*:*:*:*:*:*
ciscounity4.0(2)cpe:2.3:a:cisco:unity:4.0\(2\):*:*:*:*:*:*:*
ciscounity4.0(3)cpe:2.3:a:cisco:unity:4.0\(3\):*:*:*:*:*:*:*
ciscounity4.0(3)cpe:2.3:a:cisco:unity:4.0\(3\):sr1:*:*:*:*:*:*
ciscounity4.0(4)cpe:2.3:a:cisco:unity:4.0\(4\):*:*:*:*:*:*:*
ciscounity4.0(4)cpe:2.3:a:cisco:unity:4.0\(4\):sr1:*:*:*:*:*:*
ciscounity4.0(5)cpe:2.3:a:cisco:unity:4.0\(5\):*:*:*:*:*:*:*
ciscounity4.1(1)cpe:2.3:a:cisco:unity:4.1\(1\):*:*:*:*:*:*:*
ciscounity4.2(1)cpe:2.3:a:cisco:unity:4.2\(1\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unity	4.0	cpe:2.3:a:cisco:unity:4.0:::::::*
cisco	unity	4.0(1)	cpe:2.3:a:cisco:unity:4.0\(1\):::::::*
cisco	unity	4.0(2)	cpe:2.3:a:cisco:unity:4.0\(2\):::::::*
cisco	unity	4.0(3)	cpe:2.3:a:cisco:unity:4.0\(3\):::::::*
cisco	unity	4.0(3)	cpe:2.3:a:cisco:unity:4.0\(3\):sr1::::::
cisco	unity	4.0(4)	cpe:2.3:a:cisco:unity:4.0\(4\):::::::*
cisco	unity	4.0(4)	cpe:2.3:a:cisco:unity:4.0\(4\):sr1::::::
cisco	unity	4.0(5)	cpe:2.3:a:cisco:unity:4.0\(5\):::::::*
cisco	unity	4.1(1)	cpe:2.3:a:cisco:unity:4.1\(1\):::::::*
cisco	unity	4.2(1)	cpe:2.3:a:cisco:unity:4.2\(1\):::::::*