Three vulnerabilities have been fixed in the latest version of Ciscos Unified Communications Domain Manager (Unified CDM), one of them allowing a potential attacker to connect from a remote location with root privileges, without authentication.Assigned the CVE-2014-2198 identifier, the security glitch could be exploited because of a default private SSH key intended for the support team that is stored insecurely on the system.By obtaining this key, a potential attacker could connect to t…
Comments are closed.
