CVE-2014-3300: High severity cisco unified communications domain manager platform vulnerability
Published Jul 7, 2014
·Updated
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.
Affected Software
3 affected components
Cisco Unified CDM Application Software<=8.1.4
Cisco Unified CDM Application Software=8.1
Cisco Unified Communications Domain Manager
Event History
Jul 7, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3300?
CVE-2014-3300 is rated as a medium severity vulnerability.
2
How do I fix CVE-2014-3300?
To fix CVE-2014-3300, upgrade to Cisco Unified CDM Application Software version 10 or later.
3
What impact does CVE-2014-3300 have on affected systems?
CVE-2014-3300 allows remote attackers to modify user information without proper access control.
4
Which Cisco products are affected by CVE-2014-3300?
CVE-2014-3300 affects Cisco Unified Communications Domain Manager before version 10 and certain versions of Cisco Unified CDM Application Software.
5
Can CVE-2014-3300 be exploited remotely?
Yes, CVE-2014-3300 can be exploited remotely via a crafted URL.