Unscored CVE-2014-0731 EUVD-2014-0762GHSA-2rvc-939c-p372

The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass aut…

Published Feb 22, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.

References

20140218 Cisco Unified Communications Manager Java Class File Availability Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32915