NVD

Id
14693  
Name
CVE-2010-3280  
Description
The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:C/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-09-23  
Modified Date
2010-09-24  
Seq
2010-3280  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81366 14693 CVE-2010-3280 http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010001.pdf  View
81367 14693 CVE-2010-3280 http://www.nruns.com/_downloads/nruns-SA-2010-001.pdf  View
81368 14693 CVE-2010-3280 20100920 n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server  View
81369 14693 CVE-2010-3280 43340  View
81370 14693 CVE-2010-3280 ADV-2010-2459  View
81371 14693 CVE-2010-3280 omnitouch-callcenter-info-disclosure(61920)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37259 JVNDB-2010-003044 Alcatel-Lucent OmniTouch Contact Center の TSA コンポーネントの CCAgent オプションにおける Contact Center 操作を監視または再設定される脆弱性 Alcatel-Lucent OmniTouch Contact Center の管理サーバコンポーネント の CCAgent オプションは、クライアント側へ認証チェックを任せおよび認証セッション段階で無条件にクライアントへSuperUserのパスワードを送信するため、Contact Center 操作を監視または再設定される脆弱性が存在します。 CVE-2010-3280 45860 CVE-2010-3280 14693 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003044.html 2010-09-20 2012-03-27 View