Unscored CVE-2014-0732 EUVD-2014-0763GHSA-35vm-p7h9-q944

The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not prop…

Published Feb 20, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=32913
20140218 Cisco Unified Communications Manager Real Time Monitoring Tool Information Disclosure Vulnerability vendor-advisory