CVEvulnerability
CVE-2014-3281
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to obtain potentially sensitive user information by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun46071 and CSCun46101.
Affected configurations
• cisco unified communications domain manager
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/58657 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3281 Vendor Advisory
- http://www.securityfocus.com/bid/67925 www.securityfocus.com
- http://secunia.com/advisories/58657 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3281 Vendor Advisory
- http://www.securityfocus.com/bid/67925 www.securityfocus.com