CVEvulnerability
CVE-2014-3278
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to enumerate accounts by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun39619 and CSCun45572.
Affected configurations
• cisco unified communications domain manager
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/58657 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3278 Vendor Advisory
- http://www.securityfocus.com/bid/67924 www.securityfocus.com
- http://secunia.com/advisories/58657 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3278 Vendor Advisory
- http://www.securityfocus.com/bid/67924 www.securityfocus.com