CVE:CVE-2010-3280
CNNVD:CNNVD-201009-248
Alcatel-Lucent OmniTouch Contact Center Standard Edition中的management server (又名TSA)组件中的CCAgent选项9.0.8.4及更早版本在授权会话期间依靠客户端认证检查和无条件地发送SuperUser密码到客户端的使用。远程攻击者可以借助修改的客户端应用程序来监视或者重配置Contact Center的运行。
solution:Upgrade alcatel-lucent ccagent to a higher version than 8.0,7.1,and avoid the version (,8.0],7.1; Upgrade alcatel-lucent omnitouch_contact_center to a higher version than -