CVEvulnerability

CVE-2006-0367

6.5 MEDIUM Published 2006-01-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-01-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."

Affected configurations

• cisco call manager 1.0 • cisco call manager 2.0 • cisco call manager 3.0 • cisco call manager 3.1 • cisco call manager 3.1\(2\) • cisco call manager 3.1\(3a\) • cisco call manager 3.2 • cisco call manager 3.3 • cisco call manager 3.3\(3\) • cisco call manager 3.3\(3\)es61 • cisco call manager 3.3\(4\)es25 • cisco call manager 3.3\(5\) • cisco call manager 4.0 • cisco call manager 4.0\(2a\)es40 • cisco call manager 4.0\(2a\)sr2b • cisco call manager 4.1\(2\)es33 • cisco call manager 4.1\(3\)es07 • cisco call manager 4.1\(3\)sr1

References