Cisco Unified Communications Domain Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Unified Communications Domain Manager. A remote user can gain root access on the target system, and access and modify settings. A remote authenticated user can obtain elevated privileges on the target system.

1. A remote authenticated user can submit a specially crafted URL to trigger a flaw in the Administration interface and change the administrative credentials of an arbitrary user.
2. The system uses a default SSH private key that is stored in an non-secure manner. A remote user can obtain the SSH private key and use the key to login to the target system with root privileges. The key may be obtained, for example, by reverse engineering the binary file of the operating system.
3. A remote user can submit a specially crafted URL to access and modify BVSMWeb portal user information (e.g., personal phone directory settings, speed dials, Single Number Reach, call forward settings).