VULNERABILITY INTELLIGENCE

CVE-2010-3280

CVSS score6.9 MEDIUM
EPSS probability0.96%
CISA KEVNot currently listed
Published2010-09-23
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:N/C:C/I:P/A:P

Description

The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references