CVE-2014-2197
HighSummary
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) before version 8.1.4 does not properly implement access control, allowing remote authenticated users to modify administrative credentials via a crafted URL.
Risk Assessment
This vulnerability could lead to unauthorized access to administrative accounts, jeopardizing the security of the entire communication infrastructure of the organization.
Recommendation
It is recommended to update the software to version 8.1.4 or later to mitigate this security flaw.
Other vulnerabilities in Cisco Unified Communications Domain Manager (CDM)
See all- CVE-2014-3300High
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) before version 10 does not properly implement access control, allowing remote attackers to modify user information via a crafted URL.
- CVE-2014-2198High
Cisco Unified Communications Domain Manager (CDM) in versions before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to gain access to support and root accounts by extracting this key from a binary file found in a different installation of the product.
Original NVD description (English source)
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.