The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) 10 does not properly implement access control, which allows remote attackers to modify user information. This Metasploit module exploits the vulnerability to configure unauthorized call forwarding.
762f21e6a5fbd5bc2b2530185a86b5249202eda276e8221ef037a769fc47d618
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM), before version 10, doesn't implement access control properly, which allows remote attackers to modify user information. This Metasploit module exploits the vulnerability to make unauthorized speed dial entity manipulations.
a29708e3220657b7459cd2f5c8e3e1289481738bbee9189c1a1060eacd56bd6b