Home / Cisco Security / Security Advisories
"); replaceTable = $t(tmp).find("table"); if (!replaceTable.hasClass("cisco-data-table-small")) { replaceTable.addClass("cisco-data-table-small"); } if (replaceTable.hasClass("cisco-data-table")) { replaceTable.removeClass("cisco-data-table"); } if (replaceTable.attr("id")) { replaceTable.attr("id",replaceTable.attr("id")+"-small"); } $t(this).find("tr").each(function (index) { currentRowSpanCounter = 0; if (!$t(this).hasClass("data-table-header-row") && !$t(this).hasClass("data-table-section-header-row")) { $t(this).find("th,td").each(function (index) { colIndex = index; if (rowSpanIndexes.length > 0) { for (r = 0; r <= colIndex ; r++) { if (rowSpanIndexes[r] > 0) { if (colIndex == r) { replaceTable.find("tbody:first").append("") if ((rowCounter) % 2 == 0) { replaceTable.find("tbody:first > tr:last").addClass("data-table-alternate-row"); } } colIndex = colIndex + 1; } } } colIndex = colIndex - currentRowSpanCounter; if ($t(this).attr("rowspan") != undefined && $t(this).attr("rowspan") > 1) { rowSpanIndexes[colIndex] = $t(this).attr("rowspan"); rowSpanCellArray[colIndex] = $t(this); currentRowSpanCounter++; } if (!$t(this).hasClass("data-table-caption-cell") && !$t(this).hasClass("data-table-header-cell")) { for(var cidx = index-1; cidx >=0; cidx--) { var cidxe = $t(this).parent().children()[cidx]; var cidxspan = $t(cidxe).attr("colspan"); if(cidxspan != undefined && cidxspan > 1) { colIndex = colIndex + (cidxspan - 1) } } replaceTable.find("tbody:first").append("") if ((rowCounter) % 2 == 0) { replaceTable.find("tbody:first > tr:last").addClass("data-table-alternate-row"); } if ($t(this).attr("colspan") != undefined && $t(this).attr("colspan") > 1) { var colSpan = $t(this).attr("colspan"); var cs = 1 do{ if ($t(this).attr("rowspan") != undefined && $t(this).attr("rowspan") > 1) { rowSpanIndexes[cs+colIndex] = $t(this).attr("rowspan"); rowSpanCellArray[cs+colIndex] = $t(this); currentRowSpanCounter++; } replaceTable.find("tbody:first").append("") if ((rowCounter) % 2 == 0) { replaceTable.find("tbody:first > tr:last").addClass("data-table-alternate-row"); } cs++; }while(cs < colSpan) } } else if ($t(this).hasClass("data-table-caption-cell")) { currentCellCaption[colIndex] = $t(this).html(); var captionColSpan = $t(this).attr("colspan"); for (c = colIndex + 1; c <= colIndex + captionColSpan - 1; c++) { currentCellCaption[c] = $t(this)[0].innerHTML; } } else if ($t(this).parent().hasClass("data-table-section-header-row")) { $t(replaceTable).find("tbody:first").append("") var newCell = $t(replaceTable).find("tbody > tr:last > td:last"); var newRow = $t(replaceTable).find("tbody > tr:last"); newRow.attr("style", $t(this).parent().attr("style")); newRow.addClass($t(this).parent().attr("class")); newCell.attr("colspan", 2); newCell.attr("style", $t(this).attr("style")); newCell.addClass($t(this).attr("class")); } }); rowCounter++; } else { rowCounter = 1; $t(this).find("td,th").each(function (index) { colIndex = index; if (rowSpanIndexes.length > 0) { for (r = 0; r <= colIndex ; r++) { if (rowSpanIndexes[r] > 0) { colIndex = colIndex + 1; } } } if ($t(this).hasClass("data-table-caption-cell")) { var captionColSpan = $t(this).attr("colspan"); for(var cidx = index-1; cidx >=0; cidx--) { var cidxe = $t(this).parent().children()[cidx]; var cidxspan = $t(cidxe).attr("colspan"); if(cidxspan != undefined && cidxspan > 1) { colIndex = colIndex + (cidxspan - 1) } } currentCellCaption[colIndex] = $t(this).html(); for (c = colIndex + 1; c <= colIndex + (captionColSpan - 1); c++) { currentCellCaption[c] = $t(this)[0].innerHTML; } } else if ($t(this).parent().hasClass("data-table-section-header-row")) { $t(replaceTable).find("tbody:first").append("") var newCell = $t(replaceTable).find("tbody > tr:last > td:last"); var newRow = $t(replaceTable).find("tbody > tr:last"); newRow.attr("style", $t(this).parent().attr("style")); newRow.addClass($t(this).parent().attr("class")); newCell.attr("colspan", 2); newCell.attr("style", $t(this).attr("style")); newCell.addClass($t(this).attr("class")); } }); } for (r = 0; r < rowSpanIndexes.length; r++) { if (rowSpanIndexes[r] > 0) { rowSpanIndexes[r]--; } } }); scrollTable = false; } catch(tblexc){ console.log(tblexec); scrollTable = true; } } while (newIndex != -1) { if ($t(this).hasClass("cisco-data-table") && !scrollTable) { var c4 = replaceTable[0].outerHTML; c3 = c2.replace(escTable, escTable + c4); tmp = null; } else { c3 = c2.replace(escTable, '
' + escTable + '
'); } content = content.substring(0, newIndex) + c3; newIndex = content.indexOf(escTable, newIndex + escTable.length); if(newIndex != -1){ c2 = content.substring(newIndex,content.length); } } } if (update) { parent.html(content); } }); }); $t(".collapsible-link-list h2.ud-section-heading").click(function () { $t(this).toggleClass("open"); return false; }); $t(".ud-side-link-list h2.ud-section-heading").click(function () { $t(this).toggleClass("open"); return false; }); $t(".ud-main-link-list h2.ud-section-heading").click(function () { $t(this).toggleClass("open"); return false; }); $t("a.tableToggler").click(function () { if($t(this).prev("table").find("tr:eq(3)").length==0) { $t(this).toggle(); return; } if($t(this).text() == "Show Complete History...") { $t(this).html("Show Less"); } else { $t(this).html("Show Complete History..."); } var $tr = $t(this).prev("table").find("tr:eq(3)").toggle(); $tr.nextAll().toggle(); }).prev("table").find("tr:eq(3)").show().end().end().trigger('click'); $t("a.relatedcontenttoggle").click(function () { if ($t(this).hasClass("less")) { $t(this).removeClass("less"); $t(this).parent().find("div.flexrow:eq(9)").nextAll().addClass("relatedoverflow-hidden"); $t(this).text("Show All "+relatedCount+"..."); } else { $t(this).addClass("less"); $t(this).parent().find("div.flexrow:eq(9)").nextAll().removeClass("relatedoverflow-hidden"); $t(this).text("Show Less"); } return false; }); //Dialog Handlers hideDisalogs(); $t(window).resize(function(){ hideDisalogs(); }); $t('body').click(function (e) { hideDisalogs(); }); //Begin CVE $t('.cves').click(function (e) { e.stopPropagation(); $t(".cves").show(); }); $t('.closeCVE').click(function (e) { e.stopPropagation(); $t(".cves").hide(); return false; }); $t('.showCVE').click(function (e) { hideDisalogs(); e.stopPropagation(); var $cveIWidthDiv = $t(this).parent().parent().parent().find(".cveParentIWidth"); var $cveparentDiv = $t(this).parent().parent().parent().find(".cves"); var $content = $t(this).parent().parent().parent().find("#fullcvecontent_content"); var $this = $t(this); showDialog($this, $cveIWidthDiv, $cveparentDiv, $content); return false; }); //End CVE //Begin CWE $t('.cwes').click(function (e) { e.stopPropagation(); $t(".cwes").show(); }); $t('.closeCWE').click(function (e) { e.stopPropagation(); $t(".cwes").hide(); return false; }) $t('.showCWE').click(function (e) { hideDisalogs(); e.stopPropagation(); var $cveIWidthDiv = $t(this).parent().parent().parent().parent().find(".cweParentIWidth"); var $cveparentDiv = $t(this).parent().parent().parent().parent().find(".cwes"); var $content = $t(this).parent().parent().parent().parent().find("#fullcwecontent_content"); var $this = $t(this); showDialog($this, $cveIWidthDiv, $cveparentDiv, $content); return false; }); //End CWE //Begin DDTS Bug IDs $t('.ddts').click(function (e) { e.stopPropagation(); $t(".ddts").show(); }); $t('.closeDDTS').click(function (e) { e.stopPropagation(); $t(".ddts").hide(); return false; }); $t('.showDDTS').click(function (e) { hideDisalogs(); e.stopPropagation(); var $cveIWidthDiv = $t(this).parent().parent().parent().find(".ddtsParentIWidth"); var $cveparentDiv = $t(this).parent().parent().parent().find(".ddts"); var $content = $t(this).parent().parent().parent().find("#fullddtscontent_content"); var $this = $t(this); showDialog($this, $cveIWidthDiv, $cveparentDiv, $content); return false; }); //End DDTS Bug IDs }); function hideDisalogs() { $t(".cves").hide(); $t(".cwes").hide(); $t(".ddts").hide(); } function showDialog($this, $cveIWidthDiv, $cveparentDiv, $content) { $cveIWidthDiv.html(""); var tempCVEArray = ($content.html()).split(","); var totalCVE = tempCVEArray.length; var parentWidth; var ColclassName; var colWidth; var limitPerColumn = 0; if (totalCVE <= 20) { parentWidth = "150px"; limitPerColumn = 20; $cveparentDiv.css("width", parentWidth); if ($t(window).width() <= 768) { //$cveparentDiv.css("left" , "calc(50% - 70px)" ); } $cveIWidthDiv.append("
"); for (i = 0; i < totalCVE; i++) { $cveIWidthDiv.find(".col1").append("
" + tempCVEArray[i] + "
"); } } if (totalCVE > 20 && totalCVE <= 40) { parentWidth = "300px"; limitPerColumn = 20; $cveparentDiv.css("width", parentWidth); if ($t(window).width() <= 768) { //$cveparentDiv.css("left" , "calc(50% - 145px)" ); } $cveIWidthDiv.append("
"); for (i = 0; i < 20; i++) { $cveparentDiv.find(".col1").append("
" + tempCVEArray[i] + "
"); } for (j = 20; j < totalCVE; j++) { $cveIWidthDiv.find(".col2").append("
" + tempCVEArray[j] + "
"); } } if ($t(window).width() > 768) { if (totalCVE > 40 && totalCVE <= 60) { parentWidth = "450px"; limitPerColumn = 20; $cveIWidthDiv.append("
"); for (i = 0; i < 20; i++) { $cveIWidthDiv.find(".col1").append("
" + tempCVEArray[i] + "
"); } for (j = 20; j < 40; j++) { $cveIWidthDiv.find(".col2").append("
" + tempCVEArray[j] + "
"); } for (k = 40; k < totalCVE; k++) { $cveIWidthDiv.find(".col3").append("
" + tempCVEArray[k] + "
"); } } if (totalCVE > 60) { ColclassName = "threeCol"; colWidth = "33.33%"; limitPerColumn = parseInt(totalCVE / 3); var lim_remainder = totalCVE % 3; var lim1 = limitPerColumn; var lim2 = 2 * limitPerColumn;; var lim3 = totalCVE; if (lim_remainder == 1) { lim1 = limitPerColumn + 1; lim2 = limitPerColumn + lim1; } if (lim_remainder == 2) { lim1 = limitPerColumn + 1; lim2 = limitPerColumn + lim1 + 1; } $cveIWidthDiv.append("
"); $cveIWidthDiv.css("overflow", "auto"); for (i = 0; i < lim1; i++) { $cveIWidthDiv.find(".col1").append("
" + tempCVEArray[i] + "
"); } for (j = lim1; j < lim2; j++) { $cveIWidthDiv.find(".col2").append("
" + tempCVEArray[j] + "
"); } for (k = lim2; k < lim3; k++) { $cveIWidthDiv.find(".col3").append("
" + tempCVEArray[k] + "
"); } } } if ($t(window).width() <= 768) { if (totalCVE > 40) { ColclassName = "twoCol"; colWidth = "50%"; parentWidth = "300px"; $cveparentDiv.css("width", parentWidth); limitPerColumn = parseInt(totalCVE / 2); var lim_remainder = totalCVE % 2; var lim1 = limitPerColumn; var lim2 = totalCVE; if (lim_remainder == 1) { lim1 = limitPerColumn + 1; } $cveIWidthDiv.append("
"); $cveIWidthDiv.css("overflow", "auto"); for (i = 0; i < lim1; i++) { $cveIWidthDiv.find(".col1").append("
" + tempCVEArray[i] + "
"); } for (j = lim1; j < lim2; j++) { $cveIWidthDiv.find(".col2").append("
" + tempCVEArray[j] + "
"); } } } $cveparentDiv.slideDown(300); var cvwidth = 40; $cveparentDiv.find(".cvecolumn").each(function () { cvwidth = cvwidth + $t(this).width() + 35; }); $cveparentDiv.css("width", cvwidth); if ($t(window).width() > 768) { var cveboxheight = 300; var scrltop = $cveparentDiv.offset().top - 50; $t('html, body').animate({ scrollTop: scrltop }, 500); $cveparentDiv.transpose } } function cvssToClip(){ var target = document.getElementById("hdncvssvector"); var currentFocus = document.activeElement; target.focus(); target.setSelectionRange(0, target.value.length); // copy the selection var succeed; try { succeed = document.execCommand("copy",false,target.value); } catch(e) { succeed = false; } // restore original focus if (currentFocus && typeof currentFocus.focus === "function") { currentFocus.focus(); } }

Cisco Security Advisory

Multiple Vulnerabilities in Cisco Unified Communications Domain Manager

Critical
Advisory ID:
cisco-sa-20140702-cucdm
First Published:
2014 July 2 16:00 GMT
Last Updated:
2014 October 13 15:55 GMT
Version 3.0:
Final
Workarounds:
See below
CVE-2014-2197
CVE-2014-2198
CVE-2014-3300
CWE-255
CWE-264
CVSS Score:
Base 10.0, Temporal 8.7Click Icon to Copy Verbose Score
AV:N/AC:L/Au:N/C:C/I:C/A:C/E:H/RL:OF/RC:C
CVE-2014-2197
CVE-2014-2198
CVE-2014-3300
CWE-255
CWE-264

Summary

  • Cisco Unified Communications Domain Manager (Cisco Unified CDM) is affected by the following vulnerabilities:
    • Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability
    • Cisco Unified Communications Domain Manager Default SSH Key Vulnerability
    • Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability

    Successful exploitation of the Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability or of the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability may allow an attacker to execute arbitrary commands or obtain privileged access to the affected system.

    Successful exploitation of the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability may allow an attacker to access and modify BVSMWeb portal user information such settings in the personal phone directory, speed dials, Single Number Reach, and call forward settings.

    Cisco has released free software updates that address the Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability and the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.
    Cisco will provide a free software update for the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability as soon as the fix is available.

    Workarounds that mitigate these vulnerabilities are not available. Customers that are concerned about the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability may apply the mitigation detailed in the "Workarounds" section of this advisory.

    Note: Due to an error in the fix of the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability, all Cisco Unified CDM Platform Software releases are vulnerable regardless if a previous patch has been applied due to this security advisory. This advisory has been updated to provide additional information about the fix for the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.


    This advisory is available at the following link:
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm

Affected Products

  • Vulnerable Products

    Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability

    This vulnerability affects all Cisco Unified CDM Application Software versions prior to 8.1.4.

    Cisco Unified Communications Domain Manager Default SSH Key Vulnerability

    This vulnerability affects all Cisco Unified CDM Platform Software that do not have the "ssh_keys_cleanup" hotfix patch installed.

    Note: Due to an error in the fix, all Cisco Unified CDM Platform Software releases are vulnerable regardless if a previous patch has been applied due to this security advisory. Customers running any Cisco Unified CDM Platform Software release should request the hotfix patch called "ssh_keys_cleanup" through the normal support channel. The hotfix addresses only the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.


    Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability

    This vulnerability affects all Cisco Unified CDM Application Software versions prior to 10

    Determining the Running Software Version

    The software version for both Cisco Unified CDM Application Software and Platform Software can be determined by accessing the Administration GUI and navigating the About menu options on the top left corner of the page.

    Products Confirmed Not Vulnerable

    Cisco Unified Communications Manager (Cisco Unified CM) is not affected by these vulnerabilities.

    No other Cisco products are currently known to be affected by these vulnerabilities.

Details

  • Cisco Unified Communications Domain Manager (Cisco Unified CDM) is a service delivery and management platform that provides automation and administrative functions over the Cisco Unified Communications Manager, Cisco Unity Connection, and Cisco Jabber applications, as well as the associated phones and soft clients.

    CUCDM is part of Cisco Hosted Collaboration System (HCS). The Cisco Unified CDM solution includes an Application Software and a Platform Software.

    Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability

    A vulnerability in the web framework of the Cisco Unified Communications Domain Manager Application Software could allow an authenticated, remote attacker to elevate privileges and gain administrative access to the affected system.

    The vulnerability is due to improper implementation of authentication and authorization controls of the Administration GUI. An attacker could exploit this vulnerability by submitting a crafted URL to change the administrative credentials of a user. The attacker needs to be authenticated to the system or convince a valid user of the Administration GUI to click a malicious link.

    This vulnerability is documented in Cisco bug ID CSCun49862 (registered customers only) and has been assigned Common Vulnerabilities and Exposures (CVE) identifier CVE-2014-2197.

    Cisco Unified Communications Domain Manager Default SSH Key Vulnerability

    A vulnerability in the implementation of the framework that allows access to support representatives of the Cisco Unified Communications Domain Manager Platform Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user.

    The vulnerability is due to the presence of a default SSH private key, which is stored in an insecure way on the system. An attacker could exploit this vulnerability by obtaining the SSH private key. For example, the attacker might reverse engineer the binary file of the operating system. This will allow the attacker to connect by using the support account to the system without requiring any form of authentication. An exploit could allow the attacker to gain access to the system with the privileges of the root user.

    This vulnerability is documented in Cisco bug ID CSCud41130 (registered customers only) and has been assigned CVE ID CVE-2014-2198.

    Note: Due to an error in the fix, all Cisco Unified CDM Platform Software releases are vulnerable regardless if a previous patch has been applied due to this security advisory. Customers running any Cisco Unified CDM Platform Software release should request the hotfix patch called "ssh_keys_cleanup" through the normal support channel. The hotfix addresses only the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.
    The error in the fix is documented in Cisco bug ID CSCuq99452 (registered customers only).


    Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability

    A vulnerability in the web framework of Cisco Unified Communications Domain Manager Application Software could allow an unauthenticated, remote attacker to access and modify BVSMWeb portal user information such as settings in the personal phone directory, speed dials, Single Number Reach, and call forward settings.

    The vulnerability is due to improper implementation of authentication and authorization controls when accessing some web pages of the BVSMWeb portal. An attacker could exploit this vulnerability by submitting a crafted URL to the affected system.

    This vulnerability is documented in Cisco bug ID CSCum77041 (registered customers only) and has been assigned CVE ID CVE-2014-3300

Workarounds

  • There are no workarounds that mitigate the vulnerabilities in this security advisory.

    Customers that are affected by the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability should use the functionality offered by the Cisco Unified Communication Manager and the Cisco Unified CDM Self-Care portal instead of the Cisco Unified CDM BVSMWeb portal to provide services.

    Additional mitigations that can be deployed on Cisco devices within the network are available in the Cisco Applied Intelligence companion document for this advisory:
    https://sec.cloudapps.cisco.com/security/center/viewAMBAlert.x?alertId=34689

Fixed Software

  • When considering software upgrades, customers are advised to consult the Cisco Security Advisories, Responses, and Notices archive at http://www.cisco.com/go/psirt and review subsequent advisories to determine exposure and a complete upgrade solution.

    In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.

    Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability

    The Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability is resolved in Cisco Unified CDM Application Software usm-8.1.4-ubuntu10_04.tar.gz and later.


    Cisco Unified Communications Domain Manager Default SSH Key Vulnerability

    The Cisco Unified Communications Domain Manager Default SSH Key Vulnerability is resolved in Cisco Unified CDM Platform Software hotfix patch called "ssh_keys_cleanup" .

    Note: Due to an error in the fix, all Cisco Unified CDM Platform Software releases are vulnerable regardless if a previous patch has been applied due to this security advisory. Customers running any Cisco Unified CDM Platform Software release should request the hotfix patch called "ssh_keys_cleanup" through the normal support channel. The hotfix addresses only the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.


    Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability

    Currently, there is no Cisco Unified CDM version that addresses the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability. Cisco Unified CDM Application Software version 10 and later does not implement the BVSMWeb service interface and it is not affected by this vulnerability. Cisco Unified CDM version 10 is expected to be available in September 2014. Customers that are concerned about this vulnerability should apply the mitigation detailed in the "Workarounds" section of this advisory until a fixed software release is available.

Exploitation and Public Announcements

  • The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

    The Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability and Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability were reported to Cisco by Fatih Ozavci from Sense of Security.

    The Cisco Unified Communications Domain Manager Default SSH Key Vulnerability was found during the resolution of support cases.

Cisco Security Vulnerability Policy

  • To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Subscribe to Cisco Security Notifications

Action Links for This Advisory

Related to This Advisory

URL

Revision History

'+h2+'
' + moretext + ''; $t(this).html(html); $t(this).find("div.full").toggle(); } } } catch(exc){ console.log(exc); $t(this).html(htmlBase); } }); $t(".morelink").click(function () { if ($t(this).hasClass("less")) { $t(this).removeClass("less"); $t(this).text(moretext); } else { $t(this).addClass("less"); $t(this).text(lesstext); } $t(this).parent().find("div.snippet").toggle(); $t(this).parent().find("div.full").toggle(); return false; }); //$t(".btnShowMoreRows").click(function () { //$t('table').find('tr:gt(3)').toggle(); //}); var rowCounter = 1; var rowSpanIndexes = []; var adjustedIndex = 0; var currentRowSpanCounter = 0; var currentCellCaption = []; var colIndex = 0; var rowSpanCellArray = []; $t('#ud-master-container').find('table').not($t('#ud-revision-history').find('table')).parent().each(function () { var parent = $t(this);//.parent(); var content = $t(this).html();//.parent().html(); var update = false; var tblStrings = ""; parent.find('table').each(function () { update = true; var escTable = $t(this)[0].outerHTML; var newIndex = content.indexOf(escTable); if (tblStrings.indexOf(escTable) == -1) { currentCellCaption = [0]; tblStrings += escTable; var c2 = content.substring(newIndex); var c3 = c2; var scrollTable = false; if ($t(this).hasClass("cisco-data-table")) { try{ rowSpanIndexes = []; rowCounter = 1; var tmp = $t(document.createElement('div')) $t(this).clone().appendTo(tmp); var replaceTable = $t(tmp).find("table"); replaceTable.find("tr,td,tbody,thead").remove(); replaceTable.append("
" + currentCellCaption[r] + "" + $t(rowSpanCellArray[r]).html() + "
" + currentCellCaption[colIndex] + "" + $t(this).html() + "
" + currentCellCaption[cs+colIndex] + "" + $t(this).html() + "
" + $t(this).html() + "
" + $t(this).html() + "
Revision 3.0 2014-October-13 Added important information regarding fixed versions of the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.
Revision 2.0 2014-July-08 Added information regarding fixed versions of the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.
Revision 1.0 2014-July-02 Initial public release.
Show Less

Cisco Security Vulnerability Policy

  • To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Subscribe to Cisco Security Notifications

Action Links for This Advisory

Related to This Advisory