Description
Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1029842
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2102
Scores
EPSS
0.0133
EPSS Percentile
68.1%
Details
CWE
CWE-264
Status
published
Products (1)
cisco/unified_contact_center_express_editor_software
Published
Feb 27, 2014
Tracked Since
Feb 18, 2026