CVE-2014-2197

Cisco Unified CDM Application Software < 8.1.4 - Authenticated Credential Modification via Crafted URL

Title source: llm
STIX 2.1

Description

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59573
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030515
Various Sources vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/68333

Scores

EPSS 0.0288
EPSS Percentile 85.4%

Details

CWE
CWE-264
Status published
Products (2)
cisco/unified_cdm_application_software < 8.1
cisco/unified_communications_domain_manager
Published Jul 07, 2014
Tracked Since Feb 18, 2026