CVEvulnerability
CVE-2014-0724
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.
Affected configurations
• cisco unified communications manager (<= 10.0\(1\))
• cisco unified communications manager 10.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32825 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32825 Vendor Advisory