CVE-2014-2102

Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2014-02-27

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Unified Contact Center Express Editor Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2102
• http://www.securitytracker.com/id/1029842