CVE-2014-0657

The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows…

published January 8, 2014

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02133 · 81.7th percentile
Published
2014-01-08T21:00Z
EPSS history
Timeline
  • 08 JAN 21:00Z
    The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows…
    cvelistv5