CVE-2014-3300
HighSummary
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) before version 10 does not properly implement access control, allowing remote attackers to modify user information via a crafted URL.
Risk Assessment
The lack of proper access control may lead to unauthorized changes to user data, jeopardizing the integrity of the system and the organization's data.
Recommendation
It is recommended to update the software to the latest version to patch this vulnerability and implement additional security measures to protect user data.
Other vulnerabilities in Cisco Unified Communications Domain Manager (CDM)
See all- CVE-2014-2198High
Cisco Unified Communications Domain Manager (CDM) in versions before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to gain access to support and root accounts by extracting this key from a binary file found in a different installation of the product.
- CVE-2014-2197High
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) before version 8.1.4 does not properly implement access control, allowing remote authenticated users to modify administrative credentials via a crafted URL.
Original NVD description (English source)
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.