CVE-2014-0732

Опубликовано: 20 фев. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0732
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32913
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0732
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32913
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия до 10.0\(1\) (включая)

cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2b:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00214

Низкий

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-35vm-p7h9-q944

github

больше 3 лет назад