CVE-2010-3280

MEDIUM 6.9CVE-2010-3280 · Published 23/09/2010 · updated 16/06/2026

In short

CVE-2010-3280 is a MEDIUM (CVSS 6.9) vulnerability affecting ccagent (alcatel-lucent).
Chance of exploitation in the next 30 days (EPSS): 0.96%, higher than 61.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ccagent alcatel-lucent	`= 7.1≤ 8.0`	No fix yet

Description

The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application.

References

secunia.com/advisories/41547 · Vendor Advisory
alcatel-lucent.com/wps/DocumentStreamerServlet · Vendor Advisory
nruns.com/_downloads/nruns-SA-2010-001.pdf
securityfocus.com/archive/1/513869
securityfocus.com/bid/43340
vupen.com/english/advisories/2010/2459 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/61920

More vulnerabilities in ccagent

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free