CVE-2010-3280

2010-09-2318:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

Low

EPSS

0.013

Percentile

86.0%

JSON

The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application.