CVEvulnerability
CVE-2014-0741
6.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.2 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:N
- Weaknesses
- CWE-310
Description
The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461.
Affected configurations
• cisco unified communications manager (<= 10.0\(1\))
• cisco unified communications manager 3.3\(5\)
• cisco unified communications manager 3.3\(5\)sr1
• cisco unified communications manager 3.3\(5\)sr2a
• cisco unified communications manager 4.1\(3\)
• cisco unified communications manager 4.1\(3\)sr1
• cisco unified communications manager 4.1\(3\)sr2
• cisco unified communications manager 4.1\(3\)sr3
• cisco unified communications manager 4.1\(3\)sr4
• cisco unified communications manager 4.2
• cisco unified communications manager 4.2.1
• cisco unified communications manager 4.2.2
• cisco unified communications manager 4.2.3
• cisco unified communications manager 4.2.3sr1
• cisco unified communications manager 4.2.3sr2
• cisco unified communications manager 4.2.3sr2b
• cisco unified communications manager 4.3
• cisco unified communications manager 10.0
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0741 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33046 Vendor Advisory
- http://www.securitytracker.com/id/1029843 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0741 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33046 Vendor Advisory
- http://www.securitytracker.com/id/1029843 www.securitytracker.com