Unscored CVE-2014-3280 EUVD-2014-3293GHSA-v5ch-jpfh-x28g

The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access contr…

Published Jun 3, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain potentially sensitive user information by visiting an unspecified Administration GUI web page, aka Bug IDs CSCun46045 and CSCun46116.

References

1030306 vdb-entry
67661 vdb-entry
20140527 Cisco Unified Communications Domain Manager Admin Information Disclosure Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34379
58400 third-party-advisory