Cisco Unified Communications Domain Manager (CDM) vulnerabilities
3 known CVE vulnerabilities in Cisco Unified Communications Domain Manager (CDM), translated and rated.
- CVE-2014-3300High
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) before version 10 does not properly implement access control, allowing remote attackers to modify user information via a crafted URL.
- CVE-2014-2198High
Cisco Unified Communications Domain Manager (CDM) in versions before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to gain access to support and root accounts by extracting this key from a binary file found in a different installation of the product.
- CVE-2014-2197High
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) before version 8.1.4 does not properly implement access control, allowing remote authenticated users to modify administrative credentials via a crafted URL.