CVE-2014-3320: Medium severity cisco unified communications domain manager platform vulnerability
Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3320?
CVE-2014-3320 has a severity rating that indicates it allows remote attackers to conduct phishing attacks.
How do I fix CVE-2014-3320?
To fix CVE-2014-3320, update your Cisco Unified Communications Domain Manager to a version later than 8.1(4).
What versions of Cisco Unified Communications Domain Manager are affected by CVE-2014-3320?
CVE-2014-3320 affects Cisco Unified Communications Domain Manager versions 8.1 and earlier, including 8.1(1), 8.1(2), and 8.1(3).
What type of attack does CVE-2014-3320 enable?
CVE-2014-3320 enables remote attackers to create open redirects, leading to potential phishing attacks.
Is there a workaround for CVE-2014-3320?
There are no specific workarounds for CVE-2014-3320, and upgrading to a secure version is advised.