medium5.0
CVE-2014-0731
The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read…
Impact
The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | through 10.0\(1\) Versions 3.3\(5\), 3.3\(5\)sr1, 3.3\(5\)sr2a, 4.1\(3\), 4.1\(3\)sr1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0731
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32915
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0731
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32915