CVE-2014-8008

Summary

Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/72263
• http://www.securitytracker.com/id/1031604
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8008
• https://tools.cisco.com/security/center/viewAlert.x?alertId=37111

References

• http://www.securityfocus.com/bid/72263
• http://www.securitytracker.com/id/1031604
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8008
• https://tools.cisco.com/security/center/viewAlert.x?alertId=37111

• ←Previous
• Next→