CVE-2014-2197

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

2.88% chance of exploitation in the next 30 days, 86th percentile

Published

2014-07-07

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689

References

• CVE Record
• NVD entry

Related

• CVE-2014-2127
• CVE-2014-2198
• CVE-2014-2091
• CVE-2014-2206
• CVE-2014-2090
• CVE-2014-2211