Unscored CVE-2006-0367 EUVD-2006-0374GHSA-frmh-p5vf-w2c9

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allo…

Published Jan 22, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."

References

18501 third-party-advisory
20060118 Cisco Call Manager Privilege Escalation vendor-advisory
16293 vdb-entry
cisco-callmanager-ccmadmin-gain-priv(24172) vdb-entry
1015502 vdb-entry
ADV-2006-0250 vdb-entry
22621 vdb-entry