medium4.3
CVE-2015-6352
Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exi…
Impact
Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Hosted Collaboration Solution | Version 10.6_base |
| Cisco | Unified Communications Domain Manager | Version 10.6_base |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-ucd
- http://www.securityfocus.com/bid/77341
- http://www.securitytracker.com/id/1034022
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-ucd
- http://www.securityfocus.com/bid/77341
- http://www.securitytracker.com/id/1034022