CVE-2014-3338: The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled,...

Security readout for executives and security teams

This issue affects Cisco Unified Communications Manager 10.0(1) deployments using single sign-on. An authenticated remote user could exploit weak Kerberos SSO token validation in CTIManager to gain privileges and execute commands. The sources do not provide CVSS scoring or confirmed active exploitation. Exposure appears limited to Cisco Unified Communications Manager 10.0(1) systems with single sign-on enabled. The bundle does not identify other affected versions, deployment prerequisites beyond SSO, or vulnerable configurations outside CTIManager. Treat this as high priority where CUCM 10.0(1) with SSO remains in use. The business risk is privileged compromise of a communications platform. Urgency is lower if the product is absent, upgraded, or SSO is not enabled. Mitigation focus: Check Cisco's advisory for fixed releases or official workarounds.; Inventory CUCM 10.0(1) systems and confirm SSO status.; Prioritize remediation for internet-accessible or broadly reachable CUCM environments..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.