CVE-2014-3320
First published: Fri Jul 18 2014(Updated: )
Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Communications Domain Manager Platform | <=8.1\(.4\) | |
| Cisco Unified Communications Domain Manager Platform | =8.1 | |
| Cisco Unified Communications Domain Manager Platform | =8.1\(.1\) | |
| Cisco Unified Communications Domain Manager Platform | =8.1\(.2\) | |
| Cisco Unified Communications Domain Manager Platform | =8.1\(.3\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3320?
CVE-2014-3320 has a severity rating that indicates it allows remote attackers to conduct phishing attacks.
How do I fix CVE-2014-3320?
To fix CVE-2014-3320, update your Cisco Unified Communications Domain Manager to a version later than 8.1(4).
What versions of Cisco Unified Communications Domain Manager are affected by CVE-2014-3320?
CVE-2014-3320 affects Cisco Unified Communications Domain Manager versions 8.1 and earlier, including 8.1(1), 8.1(2), and 8.1(3).
What type of attack does CVE-2014-3320 enable?
CVE-2014-3320 enables remote attackers to create open redirects, leading to potential phishing attacks.
Is there a workaround for CVE-2014-3320?
There are no specific workarounds for CVE-2014-3320, and upgrading to a secure version is advised.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco unified communications domain manager platform
- version/cisco unified communications domain manager platform/8.1\(.4\)
- version/cisco unified communications domain manager platform/8.1
- version/cisco unified communications domain manager platform/8.1\(.1\)
- version/cisco unified communications domain manager platform/8.1\(.2\)
- version/cisco unified communications domain manager platform/8.1\(.3\)