PT-2014-5225 · Cisco · Cisco Unified Communications Manager

Publicado 2014-08-11 · Atualizado 2017-08-29 · CVE-2014-3332

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager (CM) versions 8.6.2 and earlier

Description The issue is related to an incorrect CLI restrictions setting, allowing remote authenticated users to establish undetected concurrent logins.

Recommendations For versions 8.6.2 and earlier, update to a version that addresses the incorrect CLI restrictions setting to prevent undetected concurrent logins.

Correção

Identificadores relacionados

CVE-2014-3332

Produtos afetados

Cisco Unified Communications Manager

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/95136 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3332 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35198 · Aviso do Fabricante
• http://securityfocus.com/bid/69068 · Nota
• http://securitytracker.com/id/1030687 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332 · Aviso do Fabricante