CVE-2014-0724

The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
VendorProductVersion
ciscounified_communications_manager
𝑥
≤ 10.0\(1\)
ciscounified_communications_manager
10.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724
http://tools.cisco.com/security/center/viewAlert.x?alertId=32825
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724
http://tools.cisco.com/security/center/viewAlert.x?alertId=32825