Description
The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34574
- 1030408 vdb-entry
- 58315 third-party-advisory
- 20140609 Multiple Vulnerabilities in Real-Time Monitoring Tool of Cisco Unified Communications Manager vendor-advisory