CVE-2014-0657

The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.

• cisco unified communications manager (<= 9.1\(1\)) • cisco unified communications manager 3.3\(5\) • cisco unified communications manager 3.3\(5\)sr1 • cisco unified communications manager 3.3\(5\)sr2a • cisco unified communications manager 4.1\(3\) • cisco unified communications manager 4.1\(3\)sr1 • cisco unified communications manager 4.1\(3\)sr2 • cisco unified communications manager 4.1\(3\)sr3 • cisco unified communications manager 4.1\(3\)sr4 • cisco unified communications manager 4.2 • cisco unified communications manager 4.2.1 • cisco unified communications manager 4.2.2 • cisco unified communications manager 4.2.3 • cisco unified communications manager 4.2.3sr1 • cisco unified communications manager 4.2.3sr2 • cisco unified communications manager 4.2.3sr2b • cisco unified communications manager 4.3 • cisco unified communications manager 4.3\(1\) • cisco unified communications manager 5.0 • cisco unified communications manager 5.1 • cisco unified communications manager 5.1\(1\) • cisco unified communications manager 5.1\(1b\) • cisco unified communications manager 5.1\(1c\) • cisco unified communications manager 5.1\(2\) • cisco unified communications manager 5.1\(2a\) • cisco unified communications manager 5.1\(2b\) • cisco unified communications manager 5.1\(3\) • cisco unified communications manager 5.1\(3a\) • cisco unified communications manager 5.1\(3c\) • cisco unified communications manager 5.1\(3d\) • cisco unified communications manager 5.1\(3e\) • cisco unified communications manager 5.1.2 • cisco unified communications manager 6.0 • cisco unified communications manager 6.0\(1\) • cisco unified communications manager 6.0\(1a\) • cisco unified communications manager 6.0\(1b\) • cisco unified communications manager 6.1\(1\) • cisco unified communications manager 6.1\(1a\) • cisco unified communications manager 6.1\(1b\) • cisco unified communications manager 6.1\(2\) • cisco unified communications manager 6.1\(2\)su1 • cisco unified communications manager 6.1\(2\)su1a • cisco unified communications manager 6.1\(3\) • cisco unified communications manager 6.1\(3a\) • cisco unified communications manager 6.1\(3b\) • cisco unified communications manager 6.1\(3b\)su1 • cisco unified communications manager 6.1\(4\) • cisco unified communications manager 6.1\(4\)su1 • cisco unified communications manager 6.1\(4a\) • cisco unified communications manager 6.1\(4a\)su2 • cisco unified communications manager 6.1\(5\) • cisco unified communications manager 6.1\(5\)su1 • cisco unified communications manager 6.1\(5\)su2 • cisco unified communications manager 6.1\(5\)su3 • cisco unified communications manager 7.0\(1\)su1 • cisco unified communications manager 7.0\(1\)su1a • cisco unified communications manager 7.0\(2\) • cisco unified communications manager 7.0\(2a\) • cisco unified communications manager 7.0\(2a\)su1 • cisco unified communications manager 7.0\(2a\)su2 … and 53 more