CVEvulnerability
CVE-2014-3279
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643.
Affected configurations
• cisco unified communications domain manager (<= 9.0\(.1\))
• cisco unified communications domain manager 7.4
• cisco unified communications domain manager 8.6
• cisco unified communications domain manager 8.6\(.2\)
• cisco unified communications domain manager 9.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/58400 secunia.com
- http://secunia.com/advisories/58657 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3279 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34381 Vendor Advisory
- http://www.securityfocus.com/bid/67663 www.securityfocus.com
- http://www.securitytracker.com/id/1030306 www.securitytracker.com
- http://secunia.com/advisories/58400 secunia.com
- http://secunia.com/advisories/58657 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3279 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34381 Vendor Advisory
- http://www.securityfocus.com/bid/67663 www.securityfocus.com
- http://www.securitytracker.com/id/1030306 www.securitytracker.com