CVE-2014-2197

Currently unrated

Key Information:

Vendor
Cisco
Status
Unified Communications Domain Manager
Unified Cdm Application Software
Vendor
CVE Published:
7 July 2014

Summary

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.

References

http://secunia.com/advisories/59573
third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id/1030515
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.