CVE-2014-0657
N/A
Published: January 8, 2014 at 09:00 PM UTC
Updated: June 17, 2026 at 12:03 AM UTC
1 product affected across 1 vendorUnified Communications Manager
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 9.1(1)3.3(5)3.3(5)sr13.3(5)sr2a4.1(3)4.1(3)sr14.1(3)sr24.1(3)sr34.1(3)sr44.24.2.14.2.24.2.34.2.3sr14.2.3sr24.2.3sr2b4.34.3(1)5.05.15.1(1)5.1(1b)5.1(1c)5.1(2)5.1(2a)5.1(2b)5.1(3)5.1(3a)5.1(3c)5.1(3d)5.1(3e)5.1.26.06.0(1)6.0(1a)6.0(1b)6.1(1)6.1(1a)6.1(1b)6.1(2)6.1(2)su16.1(2)su1a6.1(3)6.1(3a)6.1(3b)6.1(3b)su16.1(4)6.1(4)su16.1(4a)6.1(4a)su26.1(5)6.1(5)su16.1(5)su26.1(5)su37.0(1)su17.0(1)su1a7.0(2)7.0(2a)7.0(2a)su17.0(2a)su27.1(2a)7.1(2a)su17.1(2b)7.1(2b)su17.1(3)7.1(3a)7.1(3a)su17.1(3a)su1a7.1(3b)7.1(3b)su17.1(3b)su27.1(5)7.1(5)su17.1(5)su1a7.1(5a)7.1(5b)7.1(5b)su17.1(5b)su1a7.1(5b)su27.1(5b)su37.1(5b)su47.1(5b)su57.1(5b)su68.08.0(1)8.0(2)8.0(2a)8.0(2b)8.0(2c)8.0(2c)su18.0(3)8.0(3a)8.0(3a)su18.0(3a)su28.0(3a)su38.58.5(1)8.5(1)su18.5(1)su28.5(1)su38.5(1)su48.5(1)su58.68.6(1)8.6(1a)8.6(2)8.6(2a)8.6(2a)su18.6(2a)su28.6(2a)su38.6(3)8.6(4)9.0(1)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (7)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0657x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://tools.cisco.com/security/center/viewAlert.x?alertId=32341VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/64690VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1029571VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/90120Quick Info
StatusMODIFIED
CWE
CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card