Alcatel-lucent » Ccagent : Security Vulnerabilities, CVEs,
The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application.
Max CVSS
6.9
EPSS Score
1.31%
Published
2010-09-23
Updated
2017-08-17
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
Max CVSS
7.6
EPSS Score
1.80%
Published
2010-09-23
Updated
2017-08-17
2 vulnerabilities found