Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-3280

The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain potentially sensitive user information by visiting an unspecified Administration GUI web page, aka Bug IDs CSCun46045 and CSCun46116.

Published

2014-06-03T04:44:49.417

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

8.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	cisco	unified_communications_domain_manager	≤ 9.0\(.1\)	Yes
Application	cisco	unified_communications_domain_manager	7.4	Yes
Application	cisco	unified_communications_domain_manager	8.6	Yes
Application	cisco	unified_communications_domain_manager	8.6\(.2\)	Yes
Application	cisco	unified_communications_domain_manager	9.0	Yes

References

http://secunia.com/advisories/58400 Permissions Required ([email protected])
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3280 Vendor Advisory ([email protected])
http://tools.cisco.com/security/center/viewAlert.x?alertId=34379 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/67661 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1030306 Third Party Advisory, VDB Entry ([email protected])
http://secunia.com/advisories/58400 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3280 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://tools.cisco.com/security/center/viewAlert.x?alertId=34379 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/67661 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1030306 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)