{"api_version":"1","generated_at":"2026-07-23T10:19:14+00:00","cve":"CVE-2008-3814","urls":{"html":"https://cve.report/CVE-2008-3814","api":"https://cve.report/api/cve/CVE-2008-3814.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-3814","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-3814"},"summary":{"title":"CVE-2008-3814","description":"Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once.","state":"PUBLISHED","assigner":"cisco","published_at":"2008-10-08 22:00:01","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco Security Advisory: Authentication Bypass in Cisco Unity  [Products & Services] - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31638","name":"http://www.securityfocus.com/bid/31638","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Unity Remote Administration Authentication Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45741","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45741","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","name":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco Security Response: VoIPshield Reported Vulnerabilities in Cisco Unity Server  [Products & Services] - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31642","name":"http://www.securityfocus.com/bid/31642","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Unity 7.0 Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/32187","name":"http://secunia.com/advisories/32187","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Unity Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021011","name":"http://www.securitytracker.com/id?1021011","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Unity Authentication Bypass Bug Lets Remote Users View and Modify the Configuration - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.voipshield.com/research-details.php?id=126","name":"http://www.voipshield.com/research-details.php?id=126","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Nothing found for  Research Details Php?id=126","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2008/2771","name":"http://www.vupen.com/english/advisories/2008/2771","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3814","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3814","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0\\(1\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0\\(2\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0\\(3\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0\\(3\\)","cpe7":"sr1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0\\(4\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0\\(4\\)","cpe7":"sr1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.0\\(5\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.1\\(1\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"4.2\\(1\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"5.0\\(1\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unity","cpe6":"7.0\\(2\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:52:59.885Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"32187","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32187"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.voipshield.com/research-details.php?id=126"},{"name":"20081008 Authentication Bypass in Cisco Unity","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml"},{"name":"31642","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31642"},{"name":"31638","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31638"},{"name":"unityserver-anonymous-authentication-bypass(45741)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45741"},{"name":"1021011","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021011"},{"name":"ADV-2008-2771","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2771"},{"name":"20081008 VoIPshield Reported Vulnerabilities in Cisco Unity Server","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-10-08T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"32187","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32187"},{"tags":["x_refsource_MISC"],"url":"http://www.voipshield.com/research-details.php?id=126"},{"name":"20081008 Authentication Bypass in Cisco Unity","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml"},{"name":"31642","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31642"},{"name":"31638","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31638"},{"name":"unityserver-anonymous-authentication-bypass(45741)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45741"},{"name":"1021011","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021011"},{"name":"ADV-2008-2771","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2771"},{"name":"20081008 VoIPshield Reported Vulnerabilities in Cisco Unity Server","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2008-3814","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"32187","refsource":"SECUNIA","url":"http://secunia.com/advisories/32187"},{"name":"http://www.voipshield.com/research-details.php?id=126","refsource":"MISC","url":"http://www.voipshield.com/research-details.php?id=126"},{"name":"20081008 Authentication Bypass in Cisco Unity","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml"},{"name":"31642","refsource":"BID","url":"http://www.securityfocus.com/bid/31642"},{"name":"31638","refsource":"BID","url":"http://www.securityfocus.com/bid/31638"},{"name":"unityserver-anonymous-authentication-bypass(45741)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45741"},{"name":"1021011","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021011"},{"name":"ADV-2008-2771","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2771"},{"name":"20081008 VoIPshield Reported Vulnerabilities in Cisco Unity Server","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2008-3814","datePublished":"2008-10-08T20:44:00.000Z","dateReserved":"2008-08-27T00:00:00.000Z","dateUpdated":"2024-08-07T09:52:59.885Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-10-08 22:00:01","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E7069DF8-3006-4651-816A-855C980256FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CDE9975D-17B0-4EC8-8278-A715F4BF14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"9555A7EC-C0B6-4F48-99BE-BCE51446CF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"16F3E72C-FF4B-425E-A8FB-C1C4BEDDB019"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):sr1:*:*:*:*:*:*","matchCriteriaId":"F05B00B2-F624-427C-9643-19B8E057193D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"A164F687-98DB-409D-A9C4-D04ECF6DD53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):sr1:*:*:*:*:*:*","matchCriteriaId":"255CAB12-EE1D-4DC3-B854-E0D645F4C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"0A9BA9FD-99EC-4571-ACE8-2EFD13EFEBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B746D68B-C6A4-494C-9302-F4652E1E2A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5B478632-B2D4-443B-961A-0B3CF1A593CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:*","matchCriteriaId":"20DAD5D8-6882-48FE-AE7A-9440F47F6C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"63260FD4-A010-4B2C-8654-4E18D5E8B364"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5EED32D3-A1C5-430C-8488-4D221196CB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:7.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8268EB91-5DCC-4E0C-9537-07EF5CE1695C"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"3814","Ordinal":"1","Title":"CVE-2008-3814","CVE":"CVE-2008-3814","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"3814","Ordinal":"1","NoteData":"Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once.","Type":"Description","Title":"CVE-2008-3814"},{"CveYear":"2008","CveId":"3814","Ordinal":"2","NoteData":"2008-10-08","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"3814","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}