Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0745
Reference (s):
- CISCO:20150529 Cisco Headend System Release Archive File Download Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38944
- SECTRACK:1032445
- URL: http://www.securitytracker.com/id/1032445