CVEvulnerability
CVE-2014-2197
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
Affected configurations
• cisco unified cdm application software (<= 8.1)
• cisco unified communications domain manager
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/59573 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm Vendor Advisory
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689 tools.cisco.com
- http://www.securityfocus.com/bid/68333 www.securityfocus.com
- http://www.securitytracker.com/id/1030515 www.securitytracker.com
- http://secunia.com/advisories/59573 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm Vendor Advisory
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689 tools.cisco.com
- http://www.securityfocus.com/bid/68333 www.securityfocus.com
- http://www.securitytracker.com/id/1030515 www.securitytracker.com