CVE-2014-3282

State: Published
Severity: Not scored
Published: May 29, 2014
Updated: Aug 6, 2024
Reserved: May 7, 2014

Description

The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive number-translation information by leveraging Location Administrator privileges and entering a crafted URL, aka Bug ID CSCum76930.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=34382
1030306vdb-entry
20140527 Cisco Unified Communications Domain Manager Admin Number Translation Information Disclosure Vulnerabilityvendor-advisory
67666vdb-entry
58400third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.