imPC@ndo IT

Tracker / CVE-2014-2197

CVE-2014-2197

High 9.0

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.

Affected products and versions

cisco unified_cdm_application_software · … → 8.1
cisco unified_communications_domain_manager

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References