CVE-2014-0657

The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.

• CWE-264

• http://osvdb.org/101800
• http://secunia.com/advisories/56368
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0657Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32341Vendor Advisory
• http://www.securityfocus.com/bid/64690Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029571Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90120
• http://osvdb.org/101800
• http://secunia.com/advisories/56368
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0657Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32341Vendor Advisory
• http://www.securityfocus.com/bid/64690Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029571Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90120

Published

Jan 8, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0651The administrative interface in Cisco Context Directory Agen…
• CVE-2014-0652Cross-site scripting (XSS) vulnerability in the Mappings pag…
• CVE-2014-0653The Identity Firewall (IDFW) functionality in Cisco Adaptive…
• CVE-2014-0654Cisco Context Directory Agent (CDA) allows remote attackers …
• CVE-2014-0655The Identity Firewall (IDFW) functionality in Cisco Adaptive…
• CVE-2014-0656Cisco Context Directory Agent (CDA) allows remote authentica…
• CVE-2014-0658Cisco 9900 Unified IP phones allow remote attackers to cause…
• CVE-2014-0659The Cisco WAP4410N access point with firmware through 2.0.6.…
• CVE-2014-0660Cisco TelePresence ISDN Gateway with software before 2.2(1.9…
• CVE-2014-0661The System Status Collection Daemon (SSCD) in Cisco TelePres…
• CVE-2014-0662The SIP module in Cisco TelePresence Video Communication Ser…
• CVE-2014-0663Cross-site scripting (XSS) vulnerability in the web framewor…