Unscored CVE-2014-3279 EUVD-2014-3292GHSA-4pf5-5rrg-5jj5

The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not prope…

Published May 29, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643.

References

1030306 vdb-entry
20140527 Cisco Unified Communications Domain Manager Admin User Enumeration Vulnerability vendor-advisory
58657 third-party-advisory
67663 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=34381
58400 third-party-advisory