CVE-2014-3338: Cisco Unified Communications Manager

High severity, CVSS 8.5. EPSS: 3.1% chance of exploitation in the next 30 days.

The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled, does not properly validate Kerberos SSO tokens, which allows remote authenticated users to gain privileges and execute arbitrary commands via crafted token data, aka Bug ID CSCum95491.

Affected products

• Cisco Unified Communications Manager: version 10.0(1) only

Published 2014-08-12. Last modified 2026-06-17.