Security Advisory

CVE-2010-3280

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-09-23 18:00:00
Last updated 2024-08-07 03:03:18
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application.