Unscored CVE-2014-3332 EUVD-2014-3345GHSA-hr6h-cw97-w8v6

Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated …

Published Aug 11, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.

References

cisco-ucm-cve20143332-sec-bypass(95136) vdb-entry
20140806 Cisco Unified Communications Manager Concurrent Login Vulnerability vendor-advisory
69068 vdb-entry
1030687 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=35198