Password Reset Vulnerability in Cisco Unity Express Management Interface

CVE-2006-2166

Summary

An unspecified vulnerability exists in the HTTP management interface of Cisco Unity Express 2.2(2) and earlier versions. This flaw allows remote authenticated attackers to reset passwords for any user whose password has expired, potentially enabling unauthorized access to the system. The exploitation of this vulnerability can result in a significant security breach, affecting the integrity of user accounts within the system.

References