CVEvulnerability
CVE-2014-3300
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.
Affected configurations
• cisco unified cdm application software (<= 8.1.4)
• cisco unified cdm application software 8.1
• cisco unified communications domain manager
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/59556 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm Vendor Advisory
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689 Vendor Advisory
- http://www.securityfocus.com/bid/68331 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030515 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/59556 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm Vendor Advisory
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689 Vendor Advisory
- http://www.securityfocus.com/bid/68331 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030515 Third Party Advisory, VDB Entry