Access Control Vulnerability in Cisco Unified Communications Domain Manager
CVE-2014-3300
Currently unrated
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 7 July 2014
What is CVE-2014-3300?
The BVSMWeb portal within Cisco's Unified Communications Domain Manager fails to properly enforce access control mechanisms. This oversight permits remote attackers to manipulate user information through specially crafted URLs, creating a pathway for unauthorized modifications. Organizations utilizing the affected system should prioritize implementing robust access controls and monitoring practices to mitigate the potential for exploitation.