CVE-2015-0680 – Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict

4 years ago

Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0680

Reference (s):

CISCO:20150327 Cisco Unified Call Manager Arbitrary File Retrieval Vulnerability
URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38079
SECTRACK:1031991
URL: http://www.securitytracker.com/id/1031991