CVE-2014-3277

State: Published
Severity: Not scored
Published: May 29, 2014
Updated: Aug 6, 2024
Reserved: May 7, 2014

Description

The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive user and group information by leveraging Location Administrator privileges and entering a crafted URL, aka Bug ID CSCum77005.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

1030306vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=34380
67664vdb-entry
20140527 Cisco Unified Communications Domain Manager Admin Information Disclosure Vulnerabilityvendor-advisory
58400third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.