Description
The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297.
References
- 1030554 vdb-entry
- 20140709 Cisco Unified Communications Manager DNA Arbitrary File Upload Vulnerability vendor-advisory
- 68479 vdb-entry
- 59730 third-party-advisory
- cucm-cve20143316-file-upload(94429) vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34899