Description
Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCun79731.
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34383
- 1030306 vdb-entry
- 67665 vdb-entry
- 20140527 Cisco Unified Communications Domain Manager Self-Care HTTP Redirect Vulnerability vendor-advisory
- 58400 third-party-advisory