Security Advisory

CVE-2014-3338

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-08-12 23:00:00

Last updated 2024-08-06 10:43:05

Assigner cisco

CVSS score not scored

State PUBLISHED

Description

The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled, does not properly validate Kerberos SSO tokens, which allows remote authenticated users to gain privileges and execute arbitrary commands via crafted token data, aka Bug ID CSCum95491.

← Browse all CVEs View on cve.org ↗