CVE-2014-3280
Severity Score
4.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain potentially sensitive user information by visiting an unspecified Administration GUI web page, aka Bug IDs CSCun46045 and CSCun46116.
El Framework web en VOSS en Cisco Unified Communications Domain Manager (CDM) 9.0(.1) y anteriores no implementa debidamente control de acceso, lo que permite a usuarios remotos autenticados obtener información de usuarios potencialmente sensible mediante la visita a una página web de la interfaz gráfica de usuario (GUI) de administración no especificada, también conocido como Bug IDs CSCun46045 y CSCun46116.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-05-07 CVE Reserved
- 2014-06-03 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/67661 | Third Party Advisory | |
| http://www.securitytracker.com/id/1030306 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3280 | 2016-09-07 | |
| http://tools.cisco.com/security/center/viewAlert.x?alertId=34379 | 2016-09-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Unified Communications Domain Manager Search vendor "Cisco" for product "Unified Communications Domain Manager" | <= 9.0\(.1\) Search vendor "Cisco" for product "Unified Communications Domain Manager" and version " <= 9.0\(.1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Domain Manager Search vendor "Cisco" for product "Unified Communications Domain Manager" | 7.4 Search vendor "Cisco" for product "Unified Communications Domain Manager" and version "7.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Domain Manager Search vendor "Cisco" for product "Unified Communications Domain Manager" | 8.6 Search vendor "Cisco" for product "Unified Communications Domain Manager" and version "8.6" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Domain Manager Search vendor "Cisco" for product "Unified Communications Domain Manager" | 8.6\(.2\) Search vendor "Cisco" for product "Unified Communications Domain Manager" and version "8.6\(.2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Domain Manager Search vendor "Cisco" for product "Unified Communications Domain Manager" | 9.0 Search vendor "Cisco" for product "Unified Communications Domain Manager" and version "9.0" | - |
Affected
| ||||||