CVE-2014-3300

Published: Jul 7, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.

Affected (3)

Products: Cisco: Unified Cdm Application Software, Unified Communications Domain Manager

2 products

Unified Cdm Application Software

Unified Communications Domain Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Cdm Application Software	Up to 8.1.4
Cisco Unified Cdm Application Software	Version 8.1
Cisco Unified Communications Domain Manager	All versions

Related CWEs

References (10)

http://secunia.com/advisories/59556

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/68331

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030515

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://secunia.com/advisories/59556

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/68331

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030515

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.