CVE-2014-0724

The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2014-02-13

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Unified Communications Manager (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32825