Lucene search
CiscoCVE-2014-0724HistoryFeb 13, 2014 - 5:24 a.m.
CVE-2014-0724
2014-02-1305:24:51
CWE-20
cisco
web.nvd.nist.gov
27
cisco
ucm
cve-2014-0724
remote attackers
authentication bypass
arbitrary files
nvd
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
38.1%
The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.
Affected configurations
Node
ciscounified_communications_managerRange≤10.0\(1\)
ORciscounified_communications_managerMatch10.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | * | cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 10.0 | cpe:2.3:a:cisco:unified_communications_manager:10.0:*:*:*:*:*:*:* |
Related
cisco
cisco
Cisco Unified Communications Manager Arbitrary File Read Vulnerability
2014-02-12 18:28:09
cvelist
cvelist
CVE-2014-0724
2014-02-13 02:00:00
prion
prion
Authentication flaw
2014-02-13 05:24:00
nvd
nvd
CVE-2014-0724
2014-02-13 05:24:51
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
38.1%
Related for CVE-2014-0724