CVE-2014-3300

Опубликовано: 07 июл. 2014

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.

Ссылки

http://secunia.com/advisories/59556
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
Vendor Advisory
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
Vendor Advisory
http://www.securityfocus.com/bid/68331
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030515
Third Party Advisory
VDB Entry
http://secunia.com/advisories/59556
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
Vendor Advisory
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
Vendor Advisory
http://www.securityfocus.com/bid/68331
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030515
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_cdm_application_software:*:*:*:*:*:*:*:*

Версия до 8.1.4 (включая)

cpe:2.3:a:cisco:unified_cdm_application_software:8.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_domain_manager:-:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.45577

Средний

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-433x-mwqf-j53f

github

больше 3 лет назад