Unrated severityNVD Advisory· Published Aug 12, 2014· Updated Jun 17, 2026
CVE-2014-3338
CVE-2014-3338
Description
The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled, does not properly validate Kerberos SSO tokens, which allows remote authenticated users to gain privileges and execute arbitrary commands via crafted token data, aka Bug ID CSCum95491.
Affected products
2cpe:2.3:a:cisco:unified_communications_manager:10.0\(1\):*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:unified_communications_manager:10.0\(1\):*:*:*:*:*:*:*
- (no CPE)range: =10.0(1)
Patches
Vulnerability mechanics
References
6- tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3338nvdVendor Advisory
- tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
- secunia.com/advisories/60054nvd
- www.securityfocus.com/bid/69176nvd
- www.securitytracker.com/id/1030710nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/95246nvd
News mentions
0No linked articles in our index yet.