Lucene search
HistoryAug 12, 2014 - 11:55 p.m.
CVE-2014-3338
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.4
Confidence
High
EPSS
0.007
Percentile
80.1%
The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled, does not properly validate Kerberos SSO tokens, which allows remote authenticated users to gain privileges and execute arbitrary commands via crafted token data, aka Bug ID CSCum95491.
Affected configurations
Node
ciscounified_communications_managerMatch10.0\(1\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | 10.0(1) | cpe:2.3:a:cisco:unified_communications_manager:10.0\(1\):*:*:*:*:*:*:* |
Related
cisco
cisco
Cisco Unified Communications Manager CTIManager Vulnerability
2014-08-11 20:39:50
cvelist
cvelist
CVE-2014-3338
2014-08-12 23:00:00
prion
prion
Design/Logic Flaw
2014-08-12 23:55:00
cve
cve
CVE-2014-3338
2014-08-12 23:55:03
nessus
nessus
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.4
Confidence
High
EPSS
0.007
Percentile
80.1%
Related for NVD:CVE-2014-3338