VULNERABILITY INTELLIGENCE

CVE-2014-0657

CVSS score4 MEDIUM
EPSS probability2.13%
CISA KEVNot currently listed
Published2014-01-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.

Primary references