Unscored CVE-2014-3318 EUVD-2014-3331GHSA-9rgx-hh7j-v8gc

Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications …

Published Jul 10, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318.

References

68482 vdb-entry
1030554 vdb-entry
20140709 Cisco Unified Communications Manager DNA Path Traversal Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34897
cucm-cve20143318-dir-traversal(94433) vdb-entry
59728 third-party-advisory