Cisco Unified Communications Domain Manager Number Translation Information Disclosure Vulnerability

Bugtraq ID:	67666
Class:	Access Validation Error
CVE:	CVE-2014-3282
Remote:	Yes
Local:	No
Published:	May 27 2014 12:00AM
Updated:	May 29 2014 12:48AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Communications Domain Manager Number Translation Information Disclosure Vulnerability

Cisco Unified Communications Domain Manager is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to retrieve sensitive information like Admin number translation. Information harvested may aid in launching further attacks.

This issue is tracked by Cisco Bug ID CSCum76930.

Cisco Unified Communications Domain Manager Number Translation Information Disclosure Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco Unified Communications Domain Manager Number Translation Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Communications Domain Manager Number Translation Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco)