Description
Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.
References
- 20150327 Cisco Unified Call Manager Arbitrary File Retrieval Vulnerability vendor-advisory
- 1031991 vdb-entry