CVE-2014-3277

CVE-2014-3277 concerns Cisco Unified Communications Domain Manager (CDM) using Cisco VOSS. The issue is improper access control in the CDM Admin GUI (web framework) for version 9.0(.1) and earlier, allowing remote authenticated users with Location Administrator privileges to obtain sensitive user...